Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468
-
Size
1.8MB
-
Sample
221127-mp4tnaag77
-
MD5
292031cd65baadc1a13266a7df89b1ec
-
SHA1
fce9dfc52342f35defeb06bbe98162853f960b0f
-
SHA256
d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468
-
SHA512
8d6fc748c15a5f570165f9474c86eed65cedf88cf67be2c7e46a4b346373479e4ee910ae3605f5dc925bd97449c56298ee1b7add441855aa7cc47426085ca62a
-
SSDEEP
49152:za4KYhgQk5BCiUwUsPcZO7KPgnoOkAu+d:zpGLDtUwU9F2kAu+d
Static task
static1
Behavioral task
behavioral1
Sample
d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468
-
Size
1.8MB
-
MD5
292031cd65baadc1a13266a7df89b1ec
-
SHA1
fce9dfc52342f35defeb06bbe98162853f960b0f
-
SHA256
d290b6901cc6d8785826f432645cf2d175033558157abf4a1ceb2f3f0952a468
-
SHA512
8d6fc748c15a5f570165f9474c86eed65cedf88cf67be2c7e46a4b346373479e4ee910ae3605f5dc925bd97449c56298ee1b7add441855aa7cc47426085ca62a
-
SSDEEP
49152:za4KYhgQk5BCiUwUsPcZO7KPgnoOkAu+d:zpGLDtUwU9F2kAu+d
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-