Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
40c4b11105db1386e30bc870183a6499
-
Size
354KB
-
Sample
240104-nt3b3ahdd7
-
MD5
40c4b11105db1386e30bc870183a6499
-
SHA1
c91b01612d0a67a9200a6f0780d554a5c1e321fd
-
SHA256
ec93dd2c8432d31d3be69a3538a20fd344090246dd7289a2db829d9048ce9b5e
-
SHA512
70fb8f93c6c48cd890990ccb3a8ae85851ba44e94c294cf4aa1760bcdc20daae3e77ad381fbb699e1eb473223643d518f0c47a8955d9f1d700ace5128a575c59
-
SSDEEP
6144:I2pRrUqddTQZokHv1rQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkP1UJZIIJpkDrF1SoP/dTBk1/3
Static task
static1
Behavioral task
behavioral1
Sample
40c4b11105db1386e30bc870183a6499.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40c4b11105db1386e30bc870183a6499.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
40c4b11105db1386e30bc870183a6499
-
Size
354KB
-
MD5
40c4b11105db1386e30bc870183a6499
-
SHA1
c91b01612d0a67a9200a6f0780d554a5c1e321fd
-
SHA256
ec93dd2c8432d31d3be69a3538a20fd344090246dd7289a2db829d9048ce9b5e
-
SHA512
70fb8f93c6c48cd890990ccb3a8ae85851ba44e94c294cf4aa1760bcdc20daae3e77ad381fbb699e1eb473223643d518f0c47a8955d9f1d700ace5128a575c59
-
SSDEEP
6144:I2pRrUqddTQZokHv1rQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkP1UJZIIJpkDrF1SoP/dTBk1/3
Score10/10-
Modifies WinLogon for persistence
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-