Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4c2905b3d266f6c71fa5403b24bc7290
-
Size
13.0MB
-
Sample
240108-w7pl5afcak
-
MD5
4c2905b3d266f6c71fa5403b24bc7290
-
SHA1
09afef726da63159cbb227fae2628356e4aa48c3
-
SHA256
5271793938b84d49943f4a1af6682243a82ae3fddf2d2711268d23153554df1a
-
SHA512
d6375887139e00810015825c416b0cac3bb8d78ee704622dfb05ea572b509c68558c09dc75e7ad7e8720616b22fcef0871bac657bbf097b6a3a1baa545fe3f3c
-
SSDEEP
196608:yU7d9xZSt4U7d9xZStSU7d9xZSt4U7d9xZStI:D7d9xZo7d9xZS7d9xZo7d9xZX
Behavioral task
behavioral1
Sample
4c2905b3d266f6c71fa5403b24bc7290.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4c2905b3d266f6c71fa5403b24bc7290.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
4c2905b3d266f6c71fa5403b24bc7290
-
Size
13.0MB
-
MD5
4c2905b3d266f6c71fa5403b24bc7290
-
SHA1
09afef726da63159cbb227fae2628356e4aa48c3
-
SHA256
5271793938b84d49943f4a1af6682243a82ae3fddf2d2711268d23153554df1a
-
SHA512
d6375887139e00810015825c416b0cac3bb8d78ee704622dfb05ea572b509c68558c09dc75e7ad7e8720616b22fcef0871bac657bbf097b6a3a1baa545fe3f3c
-
SSDEEP
196608:yU7d9xZSt4U7d9xZStSU7d9xZSt4U7d9xZStI:D7d9xZo7d9xZS7d9xZo7d9xZX
Score10/10-
WarzoneRat, AveMaria
WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.
-
Warzone RAT payload
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-