Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c
-
Size
154KB
-
Sample
221201-wsla6ahh71
-
MD5
582b5d008b33aec694043c3e5c47f421
-
SHA1
166c22d5f5dde4b5021b5001927fd03bf73cc63e
-
SHA256
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c
-
SHA512
ddddd2bdb95ec4c9da09c52423b7038b27670815f7ec989d20fa462d10c9631df18bd7250a5ebdcd85b0cda4d2698b641ae29bc0d2da58cd7c65b9b364c46971
-
SSDEEP
3072:D0uILepp/gZx2DMVI2X5db4T0pMEqEWx7LAqRfwqtqz34Epfbz1L2S1:uep2Z2+5dsaMEqEWx78IfwI0bzRz
Static task
static1
Behavioral task
behavioral1
Sample
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c
-
Size
154KB
-
MD5
582b5d008b33aec694043c3e5c47f421
-
SHA1
166c22d5f5dde4b5021b5001927fd03bf73cc63e
-
SHA256
c36b1547ba41e9fa854455d809d394c5b46a3512324d0733c083cf2843f9ea2c
-
SHA512
ddddd2bdb95ec4c9da09c52423b7038b27670815f7ec989d20fa462d10c9631df18bd7250a5ebdcd85b0cda4d2698b641ae29bc0d2da58cd7c65b9b364c46971
-
SSDEEP
3072:D0uILepp/gZx2DMVI2X5db4T0pMEqEWx7LAqRfwqtqz34Epfbz1L2S1:uep2Z2+5dsaMEqEWx78IfwI0bzRz
Score10/10-
Modifies security service
-
Executes dropped EXE
-
Registers COM server for autorun
-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of SetThreadContext
-