Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941
-
Size
82KB
-
Sample
221129-hdh1laea75
-
MD5
3eb83ff6d2f4701608cd4cba20b6cf12
-
SHA1
abeea66ed71b70ecca31aab4b2f0d1b1182aad50
-
SHA256
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941
-
SHA512
912fcc1dc41cd551ae3c6b5607b1fd229383fae56bf703211c6cf67dad409c4a99a6a519b166139ad2d432a0b755edc81c44b0b3a6822da27b503229035cc500
-
SSDEEP
768:ADTTTTB999TDDrVTrGGZFIxRZTWQiSBTMHUWSiR6YuoOr1JSbIjuI4V+mVlXDXX5:9GZFMi2K6YufiDtV7VtXT7ALaDB
Static task
static1
Behavioral task
behavioral1
Sample
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941
-
Size
82KB
-
MD5
3eb83ff6d2f4701608cd4cba20b6cf12
-
SHA1
abeea66ed71b70ecca31aab4b2f0d1b1182aad50
-
SHA256
84b03498b44011a228964b30525c98974cce12e341d6e117435509bb09932941
-
SHA512
912fcc1dc41cd551ae3c6b5607b1fd229383fae56bf703211c6cf67dad409c4a99a6a519b166139ad2d432a0b755edc81c44b0b3a6822da27b503229035cc500
-
SSDEEP
768:ADTTTTB999TDDrVTrGGZFIxRZTWQiSBTMHUWSiR6YuoOr1JSbIjuI4V+mVlXDXX5:9GZFMi2K6YufiDtV7VtXT7ALaDB
Score10/10-
Modifies WinLogon for persistence
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-