Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
44939ab48a15374dc6c92a1070910a4c5dc632f9e503d6e0eff3d03218f267b6
-
Size
4.0MB
-
Sample
230203-a9dfzshd74
-
MD5
6d2913e6914b75b8b84868adebb2890f
-
SHA1
5f96394cf4fb4fc22dad7f533dfcd44080960c67
-
SHA256
44939ab48a15374dc6c92a1070910a4c5dc632f9e503d6e0eff3d03218f267b6
-
SHA512
3ecb3c50ead366ddc350ba5be52cd4c2a894d4a2efe1d40fbaf0fb9aebabf5379ca9beca1aaee147b4f20b2cf75321d64f03ff2cc0f5cceda9940ee539223f38
-
SSDEEP
98304:5AEP08IlO5HIyHblLw4/BP/sCf9zhVR3d5BVBo9QdBKJUYF86xEC:5c8EO5HIy79V/dFWJP
Static task
static1
Malware Config
Targets
-
-
Target
44939ab48a15374dc6c92a1070910a4c5dc632f9e503d6e0eff3d03218f267b6
-
Size
4.0MB
-
MD5
6d2913e6914b75b8b84868adebb2890f
-
SHA1
5f96394cf4fb4fc22dad7f533dfcd44080960c67
-
SHA256
44939ab48a15374dc6c92a1070910a4c5dc632f9e503d6e0eff3d03218f267b6
-
SHA512
3ecb3c50ead366ddc350ba5be52cd4c2a894d4a2efe1d40fbaf0fb9aebabf5379ca9beca1aaee147b4f20b2cf75321d64f03ff2cc0f5cceda9940ee539223f38
-
SSDEEP
98304:5AEP08IlO5HIyHblLw4/BP/sCf9zhVR3d5BVBo9QdBKJUYF86xEC:5c8EO5HIy79V/dFWJP
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-