Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda
-
Size
198KB
-
Sample
221203-e5z7eaec67
-
MD5
7beffa3c2e4abbe6464f42d6903fe8a3
-
SHA1
8d9a9bf2671433d55288decd19e0d28a20b30edf
-
SHA256
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda
-
SHA512
165ecfb6a773e76368fabb7fa5f057c29ec31eac15ee7e02b9b07637dfef3d8db2cdd5a5f3612a7a0fe87180b62e658c26bdc0c3384c059fd7ec4cc27af5ea7f
-
SSDEEP
3072:edDvAv5nRN47EX5gsJz6GZrBQg8DEll65FwGKbzKDwh/sE03juWvWDAvq:Yy+iz1tS4lYKbccUECyWvxvq
Static task
static1
Behavioral task
behavioral1
Sample
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda
-
Size
198KB
-
MD5
7beffa3c2e4abbe6464f42d6903fe8a3
-
SHA1
8d9a9bf2671433d55288decd19e0d28a20b30edf
-
SHA256
cf0177bf627b402d6b5c7d982c08b048b22b55a8188783081f4a184c85ab5cda
-
SHA512
165ecfb6a773e76368fabb7fa5f057c29ec31eac15ee7e02b9b07637dfef3d8db2cdd5a5f3612a7a0fe87180b62e658c26bdc0c3384c059fd7ec4cc27af5ea7f
-
SSDEEP
3072:edDvAv5nRN47EX5gsJz6GZrBQg8DEll65FwGKbzKDwh/sE03juWvWDAvq:Yy+iz1tS4lYKbccUECyWvxvq
Score10/10-
Modifies firewall policy service
-
Modifies security service
-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-