Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://github.com/Supaporn341/git-ws-01-341/releases/download/py/appsetup_v11.9.zip
-
Sample
230207-qjmvqsfb2y
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/Supaporn341/git-ws-01-341/releases/download/py/appsetup_v11.9.zip
Resource
win7-20220901-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://github.com/Supaporn341/git-ws-01-341/releases/download/py/appsetup_v11.9.zip
Resource
win10v2004-20220812-en
20 signatures
150 seconds
Malware Config
Extracted
Family
vidar
Version
2.4
Botnet
764
Attributes
-
profile_id
764
Targets
-
-
Target
https://github.com/Supaporn341/git-ws-01-341/releases/download/py/appsetup_v11.9.zip
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-