Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
test.exe
-
Size
11.3MB
-
Sample
240203-pw5qmshch4
-
MD5
de093ddf09fc55f42388c675380858c7
-
SHA1
a6167902b450841d5b50b43e9679fb00a85afafc
-
SHA256
bc44df57d0c237731ad110b4517351fc66fc20405adb36a20988a8e15de87407
-
SHA512
5035522a9dab568c5d83542c7a73cc7923d0804bde96c3e0e0f4f04c051ae2e94b34be482f31587561c2228304d560ce1cc5206b6aa6f3aa8a4d6e9d274ebc31
-
SSDEEP
196608:dc6n04UnZKSbl/HFVLgAnjNMJSon6F1W903eV4QJXMToEuGxgh858F0ibfUxgABs:i4UnTBfFZNRwSo67W+eGQJXMTozGxu8F
Behavioral task
behavioral1
Sample
test.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
test.exe
-
Size
11.3MB
-
MD5
de093ddf09fc55f42388c675380858c7
-
SHA1
a6167902b450841d5b50b43e9679fb00a85afafc
-
SHA256
bc44df57d0c237731ad110b4517351fc66fc20405adb36a20988a8e15de87407
-
SHA512
5035522a9dab568c5d83542c7a73cc7923d0804bde96c3e0e0f4f04c051ae2e94b34be482f31587561c2228304d560ce1cc5206b6aa6f3aa8a4d6e9d274ebc31
-
SSDEEP
196608:dc6n04UnZKSbl/HFVLgAnjNMJSon6F1W903eV4QJXMToEuGxgh858F0ibfUxgABs:i4UnTBfFZNRwSo67W+eGQJXMTozGxu8F
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-