Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SUPERCALCULATOR.exe
-
Size
7.8MB
-
Sample
231124-leew4sad5y
-
MD5
fe0163ed6a3417cb6e6628bcc6b119e9
-
SHA1
7cc27cf944b0d957d1afd597164d847571baccca
-
SHA256
8e871e599503382b87d5046eadf266aca81eba11e32dc99f2eb23ed5367135ca
-
SHA512
d0c8b7cfa041dc362c0d70a6663ac5d3249254b4f3a5650b2f3a85ee803e34be1ee7b77310d9dc9aa1c79c50dfdba54eca6e39b314682894315d91ddc57e0592
-
SSDEEP
196608:JqGB7cp+Cb63VdQIp2+wSJxgQrOzfEquwjZUj73DuUu2xztM5E:EK8gFdQIwhExgYwfEqNjKj7zuUuIzyG
Static task
static1
Behavioral task
behavioral1
Sample
SUPERCALCULATOR.exe
Resource
win10-20231020-en
Malware Config
Targets
-
-
Target
SUPERCALCULATOR.exe
-
Size
7.8MB
-
MD5
fe0163ed6a3417cb6e6628bcc6b119e9
-
SHA1
7cc27cf944b0d957d1afd597164d847571baccca
-
SHA256
8e871e599503382b87d5046eadf266aca81eba11e32dc99f2eb23ed5367135ca
-
SHA512
d0c8b7cfa041dc362c0d70a6663ac5d3249254b4f3a5650b2f3a85ee803e34be1ee7b77310d9dc9aa1c79c50dfdba54eca6e39b314682894315d91ddc57e0592
-
SSDEEP
196608:JqGB7cp+Cb63VdQIp2+wSJxgQrOzfEquwjZUj73DuUu2xztM5E:EK8gFdQIwhExgYwfEqNjKj7zuUuIzyG
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-