Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8d150f2f91160ea3e346dd9e9899806f9bfeeca4ce15a55bdd7a8122e37e8170

  • Size

    321KB

  • Sample

    230324-f36rvacd87

  • MD5

    784f70d97ad1d6ac85d6da3d8b6e16e7

  • SHA1

    5a79928b6d32e1453d80fe6e659149c51c69210f

  • SHA256

    8d150f2f91160ea3e346dd9e9899806f9bfeeca4ce15a55bdd7a8122e37e8170

  • SHA512

    18d391e3e745d2868263bf8585a0e20f9cc8593011548cb3c698f1d223390f9d6d8bc5cb0af8496d88b4d887544c5095f39490521f3f8fa0ccbe09f2af2413c6

  • SSDEEP

    6144:AvzUG7LoIuguebyz4BeUVLxrXgZCHHOY48rkl1oZ:AvIG7sIuguem48+EEOYr

Score
10/10

Malware Config

Targets

    • Target

      8d150f2f91160ea3e346dd9e9899806f9bfeeca4ce15a55bdd7a8122e37e8170

    • Size

      321KB

    • MD5

      784f70d97ad1d6ac85d6da3d8b6e16e7

    • SHA1

      5a79928b6d32e1453d80fe6e659149c51c69210f

    • SHA256

      8d150f2f91160ea3e346dd9e9899806f9bfeeca4ce15a55bdd7a8122e37e8170

    • SHA512

      18d391e3e745d2868263bf8585a0e20f9cc8593011548cb3c698f1d223390f9d6d8bc5cb0af8496d88b4d887544c5095f39490521f3f8fa0ccbe09f2af2413c6

    • SSDEEP

      6144:AvzUG7LoIuguebyz4BeUVLxrXgZCHHOY48rkl1oZ:AvIG7sIuguem48+EEOYr

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks