Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3f55fbd52e989f52d3e4190a04f83a7c37c02307bc85e8edf380271b7e05a593
-
Size
1.3MB
-
Sample
221101-hapnzaghb7
-
MD5
d4ec7159dd8ed5d020ad4f526cedfa71
-
SHA1
6d0c38d6e27c553fa1862ac73144a9051bf87936
-
SHA256
3f55fbd52e989f52d3e4190a04f83a7c37c02307bc85e8edf380271b7e05a593
-
SHA512
b72a5cb06c2e512717803d6fda1dc77bb7c592086cfb23dd86d56d8dba5a73cb2684906bf38053a95da8453d6ec017dbb2a54ba836dc44e7a684d3418cfc03cc
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
3f55fbd52e989f52d3e4190a04f83a7c37c02307bc85e8edf380271b7e05a593.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
3f55fbd52e989f52d3e4190a04f83a7c37c02307bc85e8edf380271b7e05a593
-
Size
1.3MB
-
MD5
d4ec7159dd8ed5d020ad4f526cedfa71
-
SHA1
6d0c38d6e27c553fa1862ac73144a9051bf87936
-
SHA256
3f55fbd52e989f52d3e4190a04f83a7c37c02307bc85e8edf380271b7e05a593
-
SHA512
b72a5cb06c2e512717803d6fda1dc77bb7c592086cfb23dd86d56d8dba5a73cb2684906bf38053a95da8453d6ec017dbb2a54ba836dc44e7a684d3418cfc03cc
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-