Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
TRADINGBOTexe.exe
-
Size
9.9MB
-
Sample
230709-xzkhwagb8x
-
MD5
5929435942fb70609a38af09caaf79c5
-
SHA1
6b724e7f68bb82c04397774dcf3a50b4217313f8
-
SHA256
24e0cad1fb1660de0d63c928343be126666e964e9a16fbb30350586258b0e146
-
SHA512
27bf0a66ab54b04a21df97f1867f81b9d77127dba0a4237288556af9ead3142be2b89f79d371b58094e2d3ff678b43c50325ff305173db599971113e34ac4f7e
-
SSDEEP
196608:DdUuyGgNKgQ/kgOFVo5QobOMwe3OPrzucNmwj3tgbXwFriutnnc0R2XxyxK7wOkw:DzJzkgO2Qotwe3OPrzucNmwj3tgbXwFl
Static task
static1
Behavioral task
behavioral1
Sample
TRADINGBOTexe.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
TRADINGBOTexe.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
TRADINGBOTexe.exe
-
Size
9.9MB
-
MD5
5929435942fb70609a38af09caaf79c5
-
SHA1
6b724e7f68bb82c04397774dcf3a50b4217313f8
-
SHA256
24e0cad1fb1660de0d63c928343be126666e964e9a16fbb30350586258b0e146
-
SHA512
27bf0a66ab54b04a21df97f1867f81b9d77127dba0a4237288556af9ead3142be2b89f79d371b58094e2d3ff678b43c50325ff305173db599971113e34ac4f7e
-
SSDEEP
196608:DdUuyGgNKgQ/kgOFVo5QobOMwe3OPrzucNmwj3tgbXwFriutnnc0R2XxyxK7wOkw:DzJzkgO2Qotwe3OPrzucNmwj3tgbXwFl
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Stops running service(s)
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-