Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
win_download.msi
-
Size
2.2MB
-
Sample
230919-f97byshb64
-
MD5
08f0c81fae67afcf6d98421626adf921
-
SHA1
235694f7c549e5653dfffdf4578b9b53f014b730
-
SHA256
0130e9d398cc202f042ac8c8712712950b5e29842993260517a79b983e8f090a
-
SHA512
060c61d8e64ac67a635fbc6c808fefcb263efe1acb7012883349a96d44a7db3799530303a1dfca43773f56a622390e0a59a128fd470bafbe04b14ef84835c544
-
SSDEEP
49152:BpUPhUTtpSD6TtYRNs2BwFJ0Tdu6Tsf3xqi2w8yjYa:BpgytID6JY1BwCdu64fhq/w8yz
Static task
static1
Behavioral task
behavioral1
Sample
win_download.msi
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
win_download.msi
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
win_download.msi
-
Size
2.2MB
-
MD5
08f0c81fae67afcf6d98421626adf921
-
SHA1
235694f7c549e5653dfffdf4578b9b53f014b730
-
SHA256
0130e9d398cc202f042ac8c8712712950b5e29842993260517a79b983e8f090a
-
SHA512
060c61d8e64ac67a635fbc6c808fefcb263efe1acb7012883349a96d44a7db3799530303a1dfca43773f56a622390e0a59a128fd470bafbe04b14ef84835c544
-
SSDEEP
49152:BpUPhUTtpSD6TtYRNs2BwFJ0Tdu6Tsf3xqi2w8yjYa:BpgytID6JY1BwCdu64fhq/w8yz
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Blocklisted process makes network request
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Uses the VBS compiler for execution
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-