Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9dca3e3498bd37d51f9d81cdcb80d10af93b908d9e09f4f248fe09e7ebb89480
-
Size
259KB
-
Sample
230114-lk2m3ahd81
-
MD5
7ef58ea7ca5efcc101ff220729517ad4
-
SHA1
5380a22d4e472d672a18a769cf74587d78e7a3b6
-
SHA256
9dca3e3498bd37d51f9d81cdcb80d10af93b908d9e09f4f248fe09e7ebb89480
-
SHA512
96857a173d9410c4b0338133077049f02b5156d2d5e71905bd6e428cd4446187fe3865965770d341fc968f607c89ee7fe687df569bdb3d3f6e827bdfcf9ece88
-
SSDEEP
3072:fXmQMwbWsel5xks26WbniBvW1krx6Aapb8pBI8jwWRjoV:PcLsei6fwRNpgpRjFE
Static task
static1
Behavioral task
behavioral1
Sample
9dca3e3498bd37d51f9d81cdcb80d10af93b908d9e09f4f248fe09e7ebb89480.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
9dca3e3498bd37d51f9d81cdcb80d10af93b908d9e09f4f248fe09e7ebb89480
-
Size
259KB
-
MD5
7ef58ea7ca5efcc101ff220729517ad4
-
SHA1
5380a22d4e472d672a18a769cf74587d78e7a3b6
-
SHA256
9dca3e3498bd37d51f9d81cdcb80d10af93b908d9e09f4f248fe09e7ebb89480
-
SHA512
96857a173d9410c4b0338133077049f02b5156d2d5e71905bd6e428cd4446187fe3865965770d341fc968f607c89ee7fe687df569bdb3d3f6e827bdfcf9ece88
-
SSDEEP
3072:fXmQMwbWsel5xks26WbniBvW1krx6Aapb8pBI8jwWRjoV:PcLsei6fwRNpgpRjFE
Score10/10-
Detects Smokeloader packer
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-