Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1aabe02dc75af24b881967d124cbfce5658992404eb058c4e574fa398f7d2bf5
-
Size
4.1MB
-
Sample
221026-v22ttsgdgq
-
MD5
71a76dbd652c0952216a08fdf571c224
-
SHA1
47f49d10182bec7794700ed01b6a2a55a90cce66
-
SHA256
1aabe02dc75af24b881967d124cbfce5658992404eb058c4e574fa398f7d2bf5
-
SHA512
5c2d0b9b35f2ae65614c2045623c3b6be29b8af7e9d1192129fd5a416831701bcf9f48a2a444da78454988854cde6d167cc599961dd47d92b5040160748abccc
-
SSDEEP
98304:lqwPwKrIE1wYbodfT2YRZvD3tgliHX3S1k41mnvUwi/Aufit:IcwK0E1IJT24ZbuU3iBmn636t
Static task
static1
Malware Config
Targets
-
-
Target
1aabe02dc75af24b881967d124cbfce5658992404eb058c4e574fa398f7d2bf5
-
Size
4.1MB
-
MD5
71a76dbd652c0952216a08fdf571c224
-
SHA1
47f49d10182bec7794700ed01b6a2a55a90cce66
-
SHA256
1aabe02dc75af24b881967d124cbfce5658992404eb058c4e574fa398f7d2bf5
-
SHA512
5c2d0b9b35f2ae65614c2045623c3b6be29b8af7e9d1192129fd5a416831701bcf9f48a2a444da78454988854cde6d167cc599961dd47d92b5040160748abccc
-
SSDEEP
98304:lqwPwKrIE1wYbodfT2YRZvD3tgliHX3S1k41mnvUwi/Aufit:IcwK0E1IJT24ZbuU3iBmn636t
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-