Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2b28b1b6f180b4b0945bbcc20ee2359a755d724a9dbdd6bd6fe3757e3c39c94b
-
Size
1018KB
-
Sample
221226-144zvsha9w
-
MD5
328c8b96d14f7d8fb30b241b050bc791
-
SHA1
f82d16266545f6c832e8de648d4a805db76cd0f0
-
SHA256
2b28b1b6f180b4b0945bbcc20ee2359a755d724a9dbdd6bd6fe3757e3c39c94b
-
SHA512
d339ed6143a78a765a40d2bb509414c22040ed05821afac57d1ec75eca0277e892cd83162ac1c848ffddb55ffdcbd94ef4eef4cbe237967b94321df7a3cd2ae7
-
SSDEEP
24576:BA1aqFK3oGDLpbHDGIP/W5BSG+TG30RXj6QjTI:BUaDZKz8GAz
Static task
static1
Behavioral task
behavioral1
Sample
2b28b1b6f180b4b0945bbcc20ee2359a755d724a9dbdd6bd6fe3757e3c39c94b.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
2b28b1b6f180b4b0945bbcc20ee2359a755d724a9dbdd6bd6fe3757e3c39c94b
-
Size
1018KB
-
MD5
328c8b96d14f7d8fb30b241b050bc791
-
SHA1
f82d16266545f6c832e8de648d4a805db76cd0f0
-
SHA256
2b28b1b6f180b4b0945bbcc20ee2359a755d724a9dbdd6bd6fe3757e3c39c94b
-
SHA512
d339ed6143a78a765a40d2bb509414c22040ed05821afac57d1ec75eca0277e892cd83162ac1c848ffddb55ffdcbd94ef4eef4cbe237967b94321df7a3cd2ae7
-
SSDEEP
24576:BA1aqFK3oGDLpbHDGIP/W5BSG+TG30RXj6QjTI:BUaDZKz8GAz
Score8/10-
Blocklisted process makes network request
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-