Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6b15f7525da0aa28eed5316a9ca99af3
-
Size
205KB
-
Sample
231226-npa21sdfaj
-
MD5
6b15f7525da0aa28eed5316a9ca99af3
-
SHA1
abf00e087b8474b85e172ed257738a0ea008cdbe
-
SHA256
671b8553f41641e9d72ef472f239fca4f8d9d1ceb395f277b11935c6f7ac319c
-
SHA512
982df863bb59a5fc3f516cc49264e3be796897992a90768207bbfe395e562dd4e45974d63ea23fa6547e06ae8e0f3f931659aaef31fe04daed935b589d2e463d
-
SSDEEP
6144:g3qqDLwQXw/jSbaQm/2YBWs6RaIpL/tL2YoKPpthlWV0J6:gaqnwQujSbaQmF9IpL/Rf5la0s
Static task
static1
Behavioral task
behavioral1
Sample
6b15f7525da0aa28eed5316a9ca99af3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b15f7525da0aa28eed5316a9ca99af3.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
6b15f7525da0aa28eed5316a9ca99af3
-
Size
205KB
-
MD5
6b15f7525da0aa28eed5316a9ca99af3
-
SHA1
abf00e087b8474b85e172ed257738a0ea008cdbe
-
SHA256
671b8553f41641e9d72ef472f239fca4f8d9d1ceb395f277b11935c6f7ac319c
-
SHA512
982df863bb59a5fc3f516cc49264e3be796897992a90768207bbfe395e562dd4e45974d63ea23fa6547e06ae8e0f3f931659aaef31fe04daed935b589d2e463d
-
SSDEEP
6144:g3qqDLwQXw/jSbaQm/2YBWs6RaIpL/tL2YoKPpthlWV0J6:gaqnwQujSbaQmF9IpL/Rf5la0s
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-