Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    527f1fa4cfec04ee31ec93960dc7ed50

  • Size

    7.5MB

  • Sample

    220926-del2esacdl

  • MD5

    527f1fa4cfec04ee31ec93960dc7ed50

  • SHA1

    03dd789dda5b17469af784df146256552b7a0535

  • SHA256

    1985acbf54aade2b89a64da25490a8ddaeb5db6af3d4f64034cdbd6193d6830b

  • SHA512

    bf906b984c18cbd491f38d4e9a53be0299afa21b01d61ef99f15453f45a32bdf2d6413439e4beed2fd02e6f0be142c70fe218e58d8f2905163507c8d9dd1e4f9

  • SSDEEP

    196608:LtbqGpfawaDA8j+Y5XdFvDy+DQ3Xdj/JCI4ipuFIT2ZajbqGpfawaDA83Q:LtbfI5XLvDtQXh/JP4mib0jbfT

Malware Config

Targets

    • Target

      527f1fa4cfec04ee31ec93960dc7ed50

    • Size

      7.5MB

    • MD5

      527f1fa4cfec04ee31ec93960dc7ed50

    • SHA1

      03dd789dda5b17469af784df146256552b7a0535

    • SHA256

      1985acbf54aade2b89a64da25490a8ddaeb5db6af3d4f64034cdbd6193d6830b

    • SHA512

      bf906b984c18cbd491f38d4e9a53be0299afa21b01d61ef99f15453f45a32bdf2d6413439e4beed2fd02e6f0be142c70fe218e58d8f2905163507c8d9dd1e4f9

    • SSDEEP

      196608:LtbqGpfawaDA8j+Y5XdFvDy+DQ3Xdj/JCI4ipuFIT2ZajbqGpfawaDA83Q:LtbfI5XLvDtQXh/JP4mib0jbfT

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks