Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

EA/EasyAccount.exe

windows7-x64

1

EA/EasyAccount.exe

windows10-2004-x64

1

EA/jaegerb...mb.exe

windows7-x64

7

EA/jaegerb...mb.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c1af561b3c0d58dfe8805b7507d1d7eaf220163ffd8cd90d8e84147694e20bd

  • Size

    2.7MB

  • Sample

    220919-xhg2esgghl

  • MD5

    eb5938ac317cced8dd34cbbc8de04c44

  • SHA1

    5d3461337545f491c618972f38235da4b3c279b0

  • SHA256

    8c1af561b3c0d58dfe8805b7507d1d7eaf220163ffd8cd90d8e84147694e20bd

  • SHA512

    ded3cde99aa579f5dea67452ab5f0092dc4993daa38798829c51f28fa32d0b29029597fb9534f586396babf49e8c41a7589cae53ccdc7148c2331297f79a4714

  • SSDEEP

    49152:1+gOl3uRq/k385/qW5Ox5ioNpHtDONjdu87HhEH8rOS+7LrE0UFVn:gVJxSW5K5io9DONjJhA8yS+7LA0UFV

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      EA/EasyAccount.exe

    • Size

      48KB

    • MD5

      a3055f81b5e25fb7ff2dc88748cac7f6

    • SHA1

      e9b8d07a562e553c8d408292ef4333c85a0ecd55

    • SHA256

      8f6e6e745749f543ac98a1a345f8f807a23dae51fe1d63e931b7a4e37dc304fc

    • SHA512

      de1f7580729abf2d6c339a89b5974938fc197c17703413c87d563c8e1561cfb5e4a254424c494ab326f3b5cf537bcc106b29062b2cc1f4482475b0163a98ba7a

    • SSDEEP

      768:JD9iozMMC566M9kSUYq41f32bSMMM7MMbMcjrtDBMnp7cJeCsUUdsFD32bSMMM7I:h9iozMMC566M94Yq41f32bSMMM7MMbME

    Score
    1/10
    behavioral1behavioral2

    • Target

      EA/jaegerbomb/Jaegerbomb.exe

    • Size

      2.7MB

    • MD5

      7af777d32002a405cd12952e196d5135

    • SHA1

      2ac5d4675e9d07a1037cdcc7d8f41c8451965bb1

    • SHA256

      2f3c013436c3b43e5e09efe6c2e35dec8a3e521d7772b400df2c7bf7f0359c37

    • SHA512

      adcdf7fb150d748eba0fe2f1fbd0de8bc9892d5330cede28040051d8559bb434253218e6488d69b8671c517e693f74f0fc3dab262cad6c18f333d1f3f498deb9

    • SSDEEP

      49152:drlI7vuzhss88zXztqypxSk96JSI7cGWvE3eQCfE2yrgNLsn:DSvuzhj88JYJSIgK3NC9yrFn

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks