Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
UnlockTool-2024-09-01-0.exe
-
Size
182.5MB
-
Sample
240212-bq4z9sed6w
-
MD5
d47143627ffdbbc4a487b6cf0832d9ae
-
SHA1
652174cacdc5e773085061be52ce6783c81bec57
-
SHA256
543b67bea0d897b65be998ccd2b0cc58579c21f249b94b9c7cdcfbfe9283de8f
-
SHA512
c03b91257c3a212375ebd40670d199bdb33235e81a6146e062f0805c7165b3a3faa0e7554eb2599d8e5b5796f2b2a17ebfe809647e8be992a660ef3edf9f8497
-
SSDEEP
3145728:bYMQFgo7i9qCKLKaPbYL3LUDpRuU24HGWmV+iB2x5MlX7GOzbm7sweWJlY20CeTJ:V6go7i9BtaDYL3Q/92FWm3XHH4sPWJCX
Static task
static1
Behavioral task
behavioral1
Sample
UnlockTool-2024-09-01-0.exe
Resource
win7-20231129-es
Behavioral task
behavioral2
Sample
UnlockTool-2024-09-01-0.exe
Resource
win10v2004-20231215-es
Malware Config
Targets
-
-
Target
UnlockTool-2024-09-01-0.exe
-
Size
182.5MB
-
MD5
d47143627ffdbbc4a487b6cf0832d9ae
-
SHA1
652174cacdc5e773085061be52ce6783c81bec57
-
SHA256
543b67bea0d897b65be998ccd2b0cc58579c21f249b94b9c7cdcfbfe9283de8f
-
SHA512
c03b91257c3a212375ebd40670d199bdb33235e81a6146e062f0805c7165b3a3faa0e7554eb2599d8e5b5796f2b2a17ebfe809647e8be992a660ef3edf9f8497
-
SSDEEP
3145728:bYMQFgo7i9qCKLKaPbYL3LUDpRuU24HGWmV+iB2x5MlX7GOzbm7sweWJlY20CeTJ:V6go7i9BtaDYL3Q/92FWm3XHH4sPWJCX
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-