Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
Size
185KB
-
Sample
221107-bhkawsagg8
-
MD5
0f42113e3b660af93e5fef09615cb727
-
SHA1
be1f82b12dbc572f29516cef5859bc75024b52d5
-
SHA256
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
SHA512
af12253e930ef35594a5c600ae1da977251c57b9c45e503ec6cf2c220a65e550e9a3b3e0c2f367b23b3a1f29471f01bf7418c97033758dd544cb5281f30f7578
-
SSDEEP
3072:mvRA50GP0vJ1uD8j6LqNPWWTBp1YsS+NSfXPc8/5/u0G:90RELqZWW9vhxsPfNu0
Static task
static1
Behavioral task
behavioral1
Sample
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
Size
185KB
-
MD5
0f42113e3b660af93e5fef09615cb727
-
SHA1
be1f82b12dbc572f29516cef5859bc75024b52d5
-
SHA256
ab4d880bb698151777dbb02bec32450fcecf12c5dd9d2f56f05a1b7c4f6e47d8
-
SHA512
af12253e930ef35594a5c600ae1da977251c57b9c45e503ec6cf2c220a65e550e9a3b3e0c2f367b23b3a1f29471f01bf7418c97033758dd544cb5281f30f7578
-
SSDEEP
3072:mvRA50GP0vJ1uD8j6LqNPWWTBp1YsS+NSfXPc8/5/u0G:90RELqZWW9vhxsPfNu0
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-