Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    USB Safe.rar

  • Size

    15.4MB

  • MD5

    d287e12e0c59883d2b2c5d89c960a480

  • SHA1

    c292c149267d83a9b3097957d0567cf0c7c882b8

  • SHA256

    9188d34a4ab1316f3f5e47287a32bec55b33a56b45a4aee8a99a2fff7a95b4e6

  • SHA512

    149da0498f0958527f993b075ba53e8f013169c3d91c9726b45a1c26330c7a73a85892f7cb4faa549015302194ec4f2bed88b6b30ff5b5f0cb2c5169a5e69ef1

  • SSDEEP

    393216:JsqlmA1q6DjN6V9MvUi6WuNq0cPN/PGYsEFigiwYkIfgjQ:eqlt1qIja9XWuIvF/ElBDkIfGQ

Score
10/10

Malware Config

Signatures

  • Panda Stealer payload 1 IoCs
  • Pandastealer family
  • Unsigned PE 47 IoCs

    Checks for missing Authenticode signature.

Files

  • USB Safe.rar
    .rar
  • Client.exe
    .exe windows:5 windows x86 arch:x86

    68a93ee452aef0b9d2d5e1f1b7acba57


    Code Sign

    Headers

    Imports

    Sections

  • DKey.dll
    .dll windows:6 windows x86 arch:x86

    e5085f92d6b76226dc3fbceae9a500d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HPSafeBox/con.{d3e34b21-9d75-101a-8c3d-00aa001a1652}
  • HPSafeBox/desktop.ini
  • ProgramData/EasyHook32.dll
    .dll windows:5 windows x86 arch:x86

    a379858a05210a88e29413155d399fa1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/EasyHook64.dll
    .dll windows:6 windows x64 arch:x64

    7c733a77800d92600b3d036b64da29bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/FP/FP.exe
    .exe windows:4 windows x86 arch:x86

    e72358aec3dbf7aee3585e6d58b4d383


    Code Sign

    Headers

    Imports

    Sections

  • ProgramData/Key.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ProgramData/WndHook.dll
    .dll windows:6 windows x86 arch:x86

    430a9ceff9e3a4b408ffe416fbb9c29b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/cscore.dll
    .dll windows:5 windows x86 arch:x86

    96b8d6c2812e678e1f94476f7e95e2ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/cscore.ini
  • ProgramData/cscore64.dll
    .dll windows:6 windows x64 arch:x64

    596505dda09a804102278a51ddeb9fc4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/CSMX.dll
    .dll windows:4 windows x86 arch:x86

    e37f7efe98ea725b5013810ca8514b87


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/Esdll.dll
    .dll windows:4 windows x86 arch:x86

    727122a5be2245cc72b0c6152b3d74d6


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/IVMSource.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1ae61317dec34b6d2bc750d4a7e31465


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/PmpSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    3b061fad8266f6f03923cff87f660920


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/RadGtSplitter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    635acae72f0a325d4d8ee6a93ca09305


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/SVPDebug.log
  • ProgramData/splayer/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/binkw32.dll
    .dll windows:4 windows x86 arch:x86

    863844ad7aa759748e31329c65f10f35


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/ijl15.dll
    .dll windows:4 windows x86 arch:x86

    43fd8fd13d2d05654de14de52b9d512d


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mcucltu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7936f92318430ce8624f42c4041836f


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mcufilecu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4324400c9d632fe833a1b2a058534034


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mdssockc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9914558a7a38407454d235202796d25a


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mtcontain.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3315a8ec8b3a582cafff8a545edf4e1e


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mtcontrol.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7870771ba65489879970c819013eb8ca


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxaudio.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0b96ee7a874474914092aaf0295b8d4e


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxrender.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    107db36d92280f8e4f340dd812750d92


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxscreen.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    27efafc89669d831ec33842d36fc3284


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxshbasu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    50afe3a74e93b027483ceebef38966a3


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxshmaiu.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a1817a287b4885d47e7c26c3fcc2e4fa


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxshsour.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1484867acca44d86b2d845db04e0c9f8


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxsource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0ed9c32523266815d8702f2f18643290


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_mxvideo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fa2ee8ebe446184e5eb4bd56e98a1e60


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/csfcodec/mpc_wtlvcl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f1344e5402d45176281f313f4dc5b0cb


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/d3dx9_41.dll
    .dll windows:6 windows x86 arch:x86

    8a679459baa9c700c6d9673a38beaffa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/dh264.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0a178f6e8386f5645f237a968c75451


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/haalis.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    414ec1bc0de0d85027929ca19e0d6be5


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/ir41_32.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    1927d0db3b7884104ff5f0a44713b4b2


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/ir50_32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a27070539407160f6a16064876e70fed


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/ivm.dll
    .dll windows:4 windows x86 arch:x86

    aeb197e7e6584ffaf9e62283b82c11d7


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/lang/default
  • ProgramData/splayer/lang/splayer.cht.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProgramData/splayer/lang/splayer.en.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProgramData/splayer/lang/splayer.fr.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProgramData/splayer/lang/splayer.ge.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProgramData/splayer/lang/splayer.ru.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ProgramData/splayer/mkunicode.dll
    .dll windows:5 windows x86 arch:x86

    1da5d5aea5082cc09bfa84c92764c4f2


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/mkzlib.dll
    .dll windows:5 windows x86 arch:x86

    efcc761811aa76f93e9c981878270d69


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/mmamrdmx.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    cf22c0c7ff7ad0f5db3ffbc40fed2717


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/mp4.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    300402277af0c7024c23e778e66ea696


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/ogm.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    b917edfd761f1ce9e8e8288156f4e023


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/rlapedec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    368725cbc26491f4c1eba4496db1bb3d


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/sinet.dll
    .dll windows:5 windows x86 arch:x86

    c540e8f5e47fa9c3891759f32609a3ca


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/smackw32.dll
    .dll windows:4 windows x86 arch:x86

    bf0ee0de6cbd5865762c575dc8f8545c


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/sphash.dll
    .dll windows:5 windows x86 arch:x86

    69eb3b6ebe4cae86f24a356e5c4de784


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/splayer.exe
    .exe windows:5 windows x86 arch:x86

    6d0f4e5f310f6ab7019ae03a7f3aee31


    Code Sign

    Headers

    Imports

    Sections

  • ProgramData/splayer/ts.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    282ab4084f47e3d52f7361377f375f8f


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/unrar.dll
    .dll windows:5 windows x86 arch:x86

    d40363c7ef8bb596c83c90482d2c056c


    Headers

    Imports

    Sections

  • ProgramData/splayer/vp6dec.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    ff1fa4ec04e991f4a598878a4c461e63


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/vp8decoder.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    199b07b9d7ffa0b7b507692853b9bdfa


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/wmasf.dll
    .dll windows:6 windows x86 arch:x86

    77f167c035bacf665ee78fb91862238d


    Headers

    Imports

    Exports

    Sections

  • ProgramData/splayer/wmvcore.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    ccda24035f47a3ade8f338ab525f9080


    Headers

    Imports

    Exports

    Sections

  • ProgramData/spload.exe
    .exe windows:6 windows x64 arch:x64

    a4df9ecc730e9927046e345432c3bccd


    Code Sign

    Headers

    Imports

    Sections

  • desktop.ini