Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f4503973e8d76e0bf7d1815af451ed6fef65e22512536c00f7f8d260a297613d
-
Size
180KB
-
Sample
221125-ymcg6sbd73
-
MD5
f0157491bc9fedf0cd2c86a408ebe31e
-
SHA1
eb36da1761fb5839c5df8ea09f084b4caa1b2c52
-
SHA256
f4503973e8d76e0bf7d1815af451ed6fef65e22512536c00f7f8d260a297613d
-
SHA512
8e9e3ebd3c3400883bc4a1e358356ef0df2ee30c9728f3e62e1bf8b12372b3b07d519d93a984d26d6a5bae7bc892489fcc2a0974899cec1d27ab8f329192f0a9
-
SSDEEP
3072:K7hESkh27iIldBMWU41aIgOBI6RHFDKIHQNHyFqfNkKx940A3kjXHEp:K7hzlsWU4M6IKFDKN5/NkKxSejXHk
Static task
static1
Behavioral task
behavioral1
Sample
Cheques_Protestar_DOC.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Cheques_Protestar_DOC.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Cheques_Protestar_DOC.exe
-
Size
210KB
-
MD5
a703fe322747737cad0de76f633c3640
-
SHA1
5523c240902d429cb36107dadc369148158c6ca2
-
SHA256
e5eddca42cad97103ff7acff8856aff5ae60862ff148d88973be5f90e12d31b8
-
SHA512
5ea870da9a55efff9ebada3182eeaaeafa6d3f8492c1d5c8377b1f5f5838e9d7579e069e33fec8359f2f4fdce6a4d3b69909c06ee813157e045bcdd906406ca0
-
SSDEEP
6144:y8dNXSEb7lqWU4imIAFDKF5/NkKhSIjOHj:Jb7g8mnNkmlOD
Score8/10-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-