Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
186KB
-
Sample
221124-ggvywsff21
-
MD5
881eec7049674ec1697517325fadded9
-
SHA1
19960cac800acdb7a86dcf2e56218ae39772afb0
-
SHA256
cf8869f3a5aa02619b1fcfccaa16994b9f99b6f6530b9c1055af23b0e391a8e0
-
SHA512
5d9544b4589c567aef2045456f3285c518692e9d920847a9e376a0938c9e105e2edca2fd8310f9a3a56d1b6f857e9ce8653a4632c75fe6a5bddbb50ce666f6ba
-
SSDEEP
3072:AAtdUN456oau1gLfBnD9n0B51xIq6Cplm1phsnF1ma87O:tdoohgLfBDlmxIqnuphsWa
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
186KB
-
MD5
881eec7049674ec1697517325fadded9
-
SHA1
19960cac800acdb7a86dcf2e56218ae39772afb0
-
SHA256
cf8869f3a5aa02619b1fcfccaa16994b9f99b6f6530b9c1055af23b0e391a8e0
-
SHA512
5d9544b4589c567aef2045456f3285c518692e9d920847a9e376a0938c9e105e2edca2fd8310f9a3a56d1b6f857e9ce8653a4632c75fe6a5bddbb50ce666f6ba
-
SSDEEP
3072:AAtdUN456oau1gLfBnD9n0B51xIq6Cplm1phsnF1ma87O:tdoohgLfBDlmxIqnuphsWa
-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-