Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954.zip
-
Size
8.6MB
-
Sample
230823-rx229acf79
-
MD5
069280a442d5625b7c0d7557a3add6aa
-
SHA1
8cb4dca71126fc6fc6bd1335d76b1419d4e3565b
-
SHA256
38b3ef87b76984e6842d9abad4fb97ecdce60e074255d78ec2ee866836a21dfc
-
SHA512
432f5f01605345f3400a3bcb59ed7fb53e5133035cbfbd66bcb00afbf2dbdbd5c27dc8f0f9baaa5de71f0c4051bb8ac9636375b8dd141319704d7e83dbabc9f8
-
SSDEEP
196608:VB4M93VjPmOTA1BnjQOEi1utiiAxAhwaVFZn3WVCN2iGm9ZR/A1Nv36/v:VB4M9FRTInDHctifZoFZ3iI23m9P/A1S
Static task
static1
Behavioral task
behavioral1
Sample
C/ProgramData/Sentinel/AFUCache/b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
C/ProgramData/Sentinel/AFUCache/b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
C/ProgramData/Sentinel/AFUCache/b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954
-
Size
9.3MB
-
MD5
1b286ad764c54202bc8e2fa9d5c8df60
-
SHA1
3a4a10cd55df20a17a3f65ee1afa8e47e7c703ae
-
SHA256
b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954
-
SHA512
b804261afb336e34197a7434904f9aa10e5c45e16aa7d334152b6bd54fafafb58dbe78e1939ad87bc8d5d2b3bbaf72ec6df3dd63fb60519654410dec601e55c5
-
SSDEEP
196608:2yWDJp+GJ4FRT3qboM/PzujcKGJDKulb/hz8JQ8QnFDRfZVB7c:2yI2GJ4S/CjcXeyfnRVB7c
Score8/10-
Drops file in Drivers directory
-
Registers new Print Monitor
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-