Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    UnlockTool-2024-09-01-0.exe

  • Size

    182.5MB

  • Sample

    240212-bq4z9sed6w

  • MD5

    d47143627ffdbbc4a487b6cf0832d9ae

  • SHA1

    652174cacdc5e773085061be52ce6783c81bec57

  • SHA256

    543b67bea0d897b65be998ccd2b0cc58579c21f249b94b9c7cdcfbfe9283de8f

  • SHA512

    c03b91257c3a212375ebd40670d199bdb33235e81a6146e062f0805c7165b3a3faa0e7554eb2599d8e5b5796f2b2a17ebfe809647e8be992a660ef3edf9f8497

  • SSDEEP

    3145728:bYMQFgo7i9qCKLKaPbYL3LUDpRuU24HGWmV+iB2x5MlX7GOzbm7sweWJlY20CeTJ:V6go7i9BtaDYL3Q/92FWm3XHH4sPWJCX

Score
8/10

Malware Config

Targets

    • Target

      UnlockTool-2024-09-01-0.exe

    • Size

      182.5MB

    • MD5

      d47143627ffdbbc4a487b6cf0832d9ae

    • SHA1

      652174cacdc5e773085061be52ce6783c81bec57

    • SHA256

      543b67bea0d897b65be998ccd2b0cc58579c21f249b94b9c7cdcfbfe9283de8f

    • SHA512

      c03b91257c3a212375ebd40670d199bdb33235e81a6146e062f0805c7165b3a3faa0e7554eb2599d8e5b5796f2b2a17ebfe809647e8be992a660ef3edf9f8497

    • SSDEEP

      3145728:bYMQFgo7i9qCKLKaPbYL3LUDpRuU24HGWmV+iB2x5MlX7GOzbm7sweWJlY20CeTJ:V6go7i9BtaDYL3Q/92FWm3XHH4sPWJCX

    Score
    8/10
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks