Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b9ea0745fdb68d9821c794df701ea8ca13bd96c07eb017139ba11f1b4962dd22
-
Size
19KB
-
Sample
221124-lc75wagg5s
-
MD5
c58fe50c1866766cf729adfc1b7a137b
-
SHA1
ad3b03413655ec694e19e3bb049f01de4cf9b12f
-
SHA256
b9ea0745fdb68d9821c794df701ea8ca13bd96c07eb017139ba11f1b4962dd22
-
SHA512
df024c4de1945e63c03c6b67d6c60c2a837dd78fc19b61047e2e12d2f78c283966c1d2beb3589bc46ff82c0a8c68b1e6b665ab20e7c3ff170408d427288400bc
-
SSDEEP
384:P6uWkj/DijJeC6bUwCb9HeGMi9rt7FLRaohbOidTowE4nAgN9m+/LbntFggCiM32:iFkfijJelQwCb1eGb9BBoyS5gjmy3nQe
Static task
static1
Behavioral task
behavioral1
Sample
lpk.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
lpk.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
二码分解小工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
二码分解小工具.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
lpk.dll
-
Size
45KB
-
MD5
6d69be00f87b765e1cf5c7303a2f4cd6
-
SHA1
dcfd01e48cb6fd4abfb2168c927751396645fc88
-
SHA256
3436427ba41d6b61d1cfc198f7bc1b2111ce6a69db83514acceb05c391c8c67c
-
SHA512
a6f377b6ce9649a3b846c01074307d6dec93882e98de65fa032f65e314cfd71bfffa88b7829c24559b55f6a2b9fcea24728db04314777b27988545fb3efd7867
-
SSDEEP
768:zojY9P368uUCS77GhGLhLpms1R6o9yHHojY9P:GmP6BS7LL18do9yHSm
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-
-
-
Target
二码分解小工具.exe
-
Size
16KB
-
MD5
7923032f236b967268751632ab4617f3
-
SHA1
5422eed9588e2b14d222af7c967816b65bc79c73
-
SHA256
7680abf32d4a98db6f50a791409817a78e3457aa444506dc955985c4f1ea3b54
-
SHA512
48eb17d000c19d30356b0c57c56767e87db45d584cacd25b3f0b1f95d4024e89d54bca7cb3556faaaf3098b7be3adef66bcce3a313c35a8bba7aaa8449b982a3
-
SSDEEP
96:Fv9lC4+m9lCIXCArTwmQtZmxSSE2NiUuhJ89EeeylQtZEa2:19lCW9lkHQXED7qxl0ma
Score1/10 -