Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561
-
Size
72KB
-
Sample
221203-hvfxkahc81
-
MD5
74f1fd62fa0476f7067e130172e0b143
-
SHA1
ebbe72c042364460f78e582acdd4ed833beb7177
-
SHA256
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561
-
SHA512
f3d82a504cd798fe87450a046038b15c37779474218a88457d18e6ce2d7ec566553b9c4cb885ede70d3e47d5fce05755c840f1c66e30642aa14ef5098ba58e91
-
SSDEEP
768:WxnxLtm2zqVypjPzmRcmHm1kiRpcrmrsUEt4WtKDLOK8su4b1SoWge9Tn3:WxZqVyp+3G1klrrt4WQDLOyuO1RW77
Static task
static1
Behavioral task
behavioral1
Sample
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561
-
Size
72KB
-
MD5
74f1fd62fa0476f7067e130172e0b143
-
SHA1
ebbe72c042364460f78e582acdd4ed833beb7177
-
SHA256
b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561
-
SHA512
f3d82a504cd798fe87450a046038b15c37779474218a88457d18e6ce2d7ec566553b9c4cb885ede70d3e47d5fce05755c840f1c66e30642aa14ef5098ba58e91
-
SSDEEP
768:WxnxLtm2zqVypjPzmRcmHm1kiRpcrmrsUEt4WtKDLOK8su4b1SoWge9Tn3:WxZqVyp+3G1klrrt4WQDLOyuO1RW77
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-