Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

DirectML.dll

windows7-x64

1

DirectML.dll

windows10-2004-x64

1

License.dll

windows7-x64

1

License.dll

windows10-2004-x64

1

Spoofer.exe

windows7-x64

3

Spoofer.exe

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

libG1LESv2.dll

windows7-x64

1

libG1LESv2.dll

windows10-2004-x64

1

locales/de.ps1

windows7-x64

3

locales/de.ps1

windows10-2004-x64

3

onnxruntime.dll

windows7-x64

1

onnxruntime.dll

windows10-2004-x64

1

resources/...m.html

windows7-x64

3

resources/...m.html

windows10-2004-x64

3

resources/...ng.dll

windows7-x64

1

resources/...ng.dll

windows10-2004-x64

1

resources/...ng.dll

windows7-x64

1

resources/...ng.dll

windows10-2004-x64

1

resources/...ng.dll

windows7-x64

1

resources/...ng.dll

windows10-2004-x64

1

resources/...47.dll

windows10-2004-x64

1

resources/ffmpeg.dll

windows7-x64

1

resources/ffmpeg.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HWlD-Spoofer.rar

  • Size

    26.2MB

  • Sample

    240921-xmw15sxhkb

  • MD5

    f02678cf99eb7dfc2ff68c6d1666e103

  • SHA1

    4d39faf64a4513d0d8600d8b27d98dd34e8c5601

  • SHA256

    ebc01204db28d3b78057ae195619aeab1a9c41859b72102d468d7a7c67468dcd

  • SHA512

    260c3191b9d1e4627ac4b7eafc0beec3569cd49d91a652b562655996e9cda1adcf35b5e1c376e3d14be19018f11a35a12dd90d77a8ebf098434674803fbbe0ab

  • SSDEEP

    393216:UJxNWmtQ+RhZNFECsotxNPr50WitZWYtp780W/aJjFokIRLUqG9RzmB:UUm/R3NFFshWUZWY/7P1jFonUqi5mB

Score
3/10
discoveryexecution

Malware Config

Targets

    • Target

      DirectML.dll

    • Size

      11.6MB

    • MD5

      0b646906d2ea7180a3a7f74a40e74e02

    • SHA1

      000010aca4859c42ec9cd87f98242bb6593650bf

    • SHA256

      5d5975d43001b5838f4a46cea1382bb37d5aeb66002062964b677e64a3db16c7

    • SHA512

      17bcddee315165bbd21bf245929e75db41632c2bff8692493ca361f3064b42e77d86cffb8cc59a2de7892f31e81676d2031fc55527eba42810210961be25bb83

    • SSDEEP

      98304:5zfeFhssDz4pH0Vpoy3M0FgyPGodyY3pfYaIJAmHBpA/uJwb29DJDrrbVMqqDZz3:dfurDeuLdddfYTimHXR82LrrbVMqq9+W

    Score
    1/10
    behavioral1behavioral2

    • Target

      License.dll

    • Size

      5B

    • MD5

      b08a5c34cf0a06615da2ca89010d8b4f

    • SHA1

      626a77d86d9d12d1772f788cf67c8e77fd9f797a

    • SHA256

      04cc5b3b49a7e9e9b6c66c7be59a20992bf2653746b5d43829c383fb233f88fa

    • SHA512

      5dce742cd0f649461b08f8f8018e0fa39ef19e813a74a91f434a15754a4fa8be83096e8fa49cf1828ac011220b7ad3724e7e4ea9cce7937a3168169d8e561b2c

    Score
    1/10
    behavioral3behavioral4

    • Target

      Spoofer.exe

    • Size

      10.7MB

    • MD5

      54d1143d3c21164242c60f696ec09c06

    • SHA1

      f3c65679f4a3d57cb5ee5903e5b131ac9f581dcb

    • SHA256

      06bfe434e5b872920652854fc7e6058cf67f423590928ea77eca6e11908de07d

    • SHA512

      0143f020a2e494ec836cba0204ff7004bb4a9a141508aba3810d6e06ecb0d27926393ff5db1467fb40e989346f29c80740fa20749411a90d03dc6955e9fb9aea

    • SSDEEP

      196608:5++DRPlq93UB2h0P3wUJsv6tWKFdu9Cu8/F:rhVXYUJsv6tWKFdu9C

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      1e2f4329fa2e58be78f5fcde2aeea167

    • SHA1

      c2ecb4d0542c49d9e906d6173f77349aaa4749a6

    • SHA256

      a92f3bb1a4d846b38e8422d7c492f638e6bf47081facbb22c92568118938d5ce

    • SHA512

      8ae9b45f7427d83b5fd0afa49c920f79fc071f362dab0a4ef72be0fd19f5243779f071d762a66ffc2180121ded618e571470d3eabbdcf21b4125cf0b04ea62f3

    • SSDEEP

      49152:3uhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8ccG:ny904wYbZCoOI85oyIV

    Score
    1/10
    behavioral7

    • Target

      libG1LESv2.dll

    • Size

      142KB

    • MD5

      b5505f1a0d0b678dd1198591bc74bc3a

    • SHA1

      4312c487599c49bc53e2d83ca34561ac3b79b729

    • SHA256

      08b34f11661de9e838ecd8fdf2780117e6b5e83edf24f5dcfae823a7e1fbfdd1

    • SHA512

      804ebb36d26f4362f03c31071905b8da41cd0318d10fa9e1fcab191438afc4d7f79d2f6bc6fea2dd45073929b88a3bf467f9d3cc63f703a1909cc089a291853f

    • SSDEEP

      3072:YZ8y3Lm1TcmyZ8y3Lm1TcmyZ8y3Lm1TcmyZ8y3Lm1Tcmt:GZ/Z/Z/ZI

    Score
    1/10
    behavioral8behavioral9

    • Target

      locales/de.pak

    • Size

      367KB

    • MD5

      cfc9d90273c31ccf66d81739aa76306a

    • SHA1

      ecab570041654b147b3dd118829e2f7ae668f840

    • SHA256

      8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a

    • SHA512

      c9a5058b34c4045ff1b7ae25f1f47bff14d06b3a97b7b1f30da65618ca7aeb0638d79f4e1cea4773cd92d9dfa7f9d2203e5734d0cfe11ee2d2a460d6cec18380

    • SSDEEP

      6144:F+QNkAjzYyqSFaPjON3Be0mzBWCj0Xs5HgIxBI0gql:cQLjMyvFaCN3mzBd5xy0gql

    Score
    3/10
    execution
    behavioral10behavioral11

    • Target

      onnxruntime.dll

    • Size

      12.6MB

    • MD5

      f1ee7888561c223f128c864500098c49

    • SHA1

      00c61eef1fd100dae39da16a57cb3047c286ae93

    • SHA256

      af7c0811957ec3424f2610dd783ab7c91acc04d21c4e6ccd8c6e8a3ffad03187

    • SHA512

      85a99e73d75f87ef22fa508a47a79d505bb06f33581d4fd8e2a04aae0695a959762258b34e7f89e546aa2d1a8703a1fe4e7aaf0d50544eae523a68347cf6f6d3

    • SSDEEP

      98304:FpiWQI5i2CU4E4/CE26u0meURZKkr7/8U:TiWQI5+U4EO5mBjLH

    Score
    1/10
    behavioral12behavioral13

    • Target

      resources/LICENSES.chromium.html

    • Size

      6.3MB

    • MD5

      34999967f735b07e9cbcf6c397cea4db

    • SHA1

      8001fcdd6ce0c6e5a3d91fd45e4c9726fa67f3e4

    • SHA256

      c5a05048505c00af46c75fb5ca22057f09dce001eada3a756c3839d59011758f

    • SHA512

      b6c2f722b6551231801e453bba8f9593d9f1a82edb305869ee07ef77f286968eb6ad5db1abbe750e88c8af973c362ee161aa5c591ea04ff39e4f4b34e6fa4baf

    • SSDEEP

      24576:/PV05W5WS9YzHIlGMmfu626s6W6a6q5AHWeQFpD:F9n

    Score
    3/10
    discovery
    behavioral14behavioral15

    • Target

      resources/app.asar.unpacked/node_modules/btime/binding.node

    • Size

      118KB

    • MD5

      13a2579ed95366185a6247c9e4b9f0cc

    • SHA1

      61fef12da622484e44b3c9ddcd61706c9af00aa0

    • SHA256

      98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f

    • SHA512

      7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0

    • SSDEEP

      1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t

    Score
    1/10
    behavioral16behavioral17

    • Target

      resources/app.asar.unpacked/node_modules/get-fonts/binding.node

    • Size

      125KB

    • MD5

      eeb1d1ea9fc3f870f292161cfa79850d

    • SHA1

      ea4f4324245f9f4d6280ef285151f688221d6023

    • SHA256

      149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c

    • SHA512

      795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254

    • SSDEEP

      3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG

    Score
    1/10
    behavioral18behavioral19

    • Target

      resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node

    • Size

      118KB

    • MD5

      6c12c930f974e5bc7872b58964f42359

    • SHA1

      805c5c899c32535d2ee8b2bc12deefe5fdaae566

    • SHA256

      094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c

    • SHA512

      f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3

    • SSDEEP

      3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS

    Score
    1/10
    behavioral20behavioral21

    • Target

      resources/d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      1e2f4329fa2e58be78f5fcde2aeea167

    • SHA1

      c2ecb4d0542c49d9e906d6173f77349aaa4749a6

    • SHA256

      a92f3bb1a4d846b38e8422d7c492f638e6bf47081facbb22c92568118938d5ce

    • SHA512

      8ae9b45f7427d83b5fd0afa49c920f79fc071f362dab0a4ef72be0fd19f5243779f071d762a66ffc2180121ded618e571470d3eabbdcf21b4125cf0b04ea62f3

    • SSDEEP

      49152:3uhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8ccG:ny904wYbZCoOI85oyIV

    Score
    1/10
    behavioral22

    • Target

      resources/ffmpeg.dll

    • Size

      2.6MB

    • MD5

      7f31b5234e44fac97d3c673a38c4c11f

    • SHA1

      65dc18e0bce308608dbba3c76d84e266c9fa53e6

    • SHA256

      0e751cd4312fab78d2c316860f1460875cd799e8d158f75934391c14ba328101

    • SHA512

      83658e0275a8e1fec8dd0f98c19c3e7d37a7205afc3547fdc09c60f0feebe72d30ecb2b182e9ed17ceaf3604ecd77810e330eff4cb5e38fef8a27b8ea9db2467

    • SSDEEP

      49152:zYuqVaqc35GHXVNtcZ44yODvSEbO/1o/GRRpYN4MJ8eIknusyUUjkU+jLtyTzQVN:zYLVl54yODvH/ySJUiLtyTzQVkU5qkJr

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks