Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
source_prepared.exe
-
Size
80.3MB
-
Sample
231012-nvbkqsab69
-
MD5
e047e82c89d2b55c312d3d73da69e7e8
-
SHA1
a0e90c099392bfc01e1f9a39e4ca7d48fe10f1be
-
SHA256
3c484d7b1c5a28ee81bb68fd1ae3fdd39772237f8dfa2e38d113db8673d52610
-
SHA512
4596d15a7c384edb01e385dbb317c43f965e54964b4797265ea13c66ffbc91860b1d4808aea139dc3f80367d2072c9efa3bb1b9bada1b418e53f982d70e9648b
-
SSDEEP
1572864:Q2MTiQYHuiEH/E7lftaIDtWWc2Mp6SbDirAH8+1osuTCSxOB6xMbWuamrBDzzg:QZTixO3HPIhlc2gnbDS6xjKcBaOvamr+
Behavioral task
behavioral1
Sample
source_prepared.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
source_prepared.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
source_prepared.exe
-
Size
80.3MB
-
MD5
e047e82c89d2b55c312d3d73da69e7e8
-
SHA1
a0e90c099392bfc01e1f9a39e4ca7d48fe10f1be
-
SHA256
3c484d7b1c5a28ee81bb68fd1ae3fdd39772237f8dfa2e38d113db8673d52610
-
SHA512
4596d15a7c384edb01e385dbb317c43f965e54964b4797265ea13c66ffbc91860b1d4808aea139dc3f80367d2072c9efa3bb1b9bada1b418e53f982d70e9648b
-
SSDEEP
1572864:Q2MTiQYHuiEH/E7lftaIDtWWc2Mp6SbDirAH8+1osuTCSxOB6xMbWuamrBDzzg:QZTixO3HPIhlc2gnbDS6xjKcBaOvamr+
Score9/10-
Enumerates VirtualBox DLL files
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-