Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8c1af561b3c0d58dfe8805b7507d1d7eaf220163ffd8cd90d8e84147694e20bd
-
Size
2.7MB
-
Sample
220919-xhg2esgghl
-
MD5
eb5938ac317cced8dd34cbbc8de04c44
-
SHA1
5d3461337545f491c618972f38235da4b3c279b0
-
SHA256
8c1af561b3c0d58dfe8805b7507d1d7eaf220163ffd8cd90d8e84147694e20bd
-
SHA512
ded3cde99aa579f5dea67452ab5f0092dc4993daa38798829c51f28fa32d0b29029597fb9534f586396babf49e8c41a7589cae53ccdc7148c2331297f79a4714
-
SSDEEP
49152:1+gOl3uRq/k385/qW5Ox5ioNpHtDONjdu87HhEH8rOS+7LrE0UFVn:gVJxSW5K5io9DONjJhA8yS+7LA0UFV
Behavioral task
behavioral1
Sample
EA/EasyAccount.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
EA/EasyAccount.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
EA/jaegerbomb/Jaegerbomb.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
EA/EasyAccount.exe
-
Size
48KB
-
MD5
a3055f81b5e25fb7ff2dc88748cac7f6
-
SHA1
e9b8d07a562e553c8d408292ef4333c85a0ecd55
-
SHA256
8f6e6e745749f543ac98a1a345f8f807a23dae51fe1d63e931b7a4e37dc304fc
-
SHA512
de1f7580729abf2d6c339a89b5974938fc197c17703413c87d563c8e1561cfb5e4a254424c494ab326f3b5cf537bcc106b29062b2cc1f4482475b0163a98ba7a
-
SSDEEP
768:JD9iozMMC566M9kSUYq41f32bSMMM7MMbMcjrtDBMnp7cJeCsUUdsFD32bSMMM7I:h9iozMMC566M94Yq41f32bSMMM7MMbME
Score1/10 -
-
-
Target
EA/jaegerbomb/Jaegerbomb.exe
-
Size
2.7MB
-
MD5
7af777d32002a405cd12952e196d5135
-
SHA1
2ac5d4675e9d07a1037cdcc7d8f41c8451965bb1
-
SHA256
2f3c013436c3b43e5e09efe6c2e35dec8a3e521d7772b400df2c7bf7f0359c37
-
SHA512
adcdf7fb150d748eba0fe2f1fbd0de8bc9892d5330cede28040051d8559bb434253218e6488d69b8671c517e693f74f0fc3dab262cad6c18f333d1f3f498deb9
-
SSDEEP
49152:drlI7vuzhss88zXztqypxSk96JSI7cGWvE3eQCfE2yrgNLsn:DSvuzhj88JYJSIgK3NC9yrFn
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-