Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484
-
Size
784KB
-
Sample
221203-gcp7vahf82
-
MD5
146a13a4c1735062c7e144f8a6aee6f3
-
SHA1
9a00f7e67196c436a4d9355007055982c24a90e7
-
SHA256
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484
-
SHA512
b4a50c3b11af3f9f3d4944d456b11743ce96381f80d98061b850719a21d7d669261b4a9a394b91a1291053ace1b1b4446ecc5c45f048e534dfed20e8ae830710
-
SSDEEP
12288:GefX5bxGTsLvx/WvBLlmDLI/wA0qSniuMVGnmjKnRlgqdQ3QCNTI:GUX5dDFWLUkWqSnZMknmMIfr5I
Static task
static1
Behavioral task
behavioral1
Sample
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484
-
Size
784KB
-
MD5
146a13a4c1735062c7e144f8a6aee6f3
-
SHA1
9a00f7e67196c436a4d9355007055982c24a90e7
-
SHA256
c358154b48ad7e666839e5cda7f41e85c1c94db320cdbd596bb251a83c80c484
-
SHA512
b4a50c3b11af3f9f3d4944d456b11743ce96381f80d98061b850719a21d7d669261b4a9a394b91a1291053ace1b1b4446ecc5c45f048e534dfed20e8ae830710
-
SSDEEP
12288:GefX5bxGTsLvx/WvBLlmDLI/wA0qSniuMVGnmjKnRlgqdQ3QCNTI:GUX5dDFWLUkWqSnZMknmMIfr5I
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext
-