Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b
-
Size
850KB
-
Sample
240304-qwnmssbe2s
-
MD5
b42ae7a9d44a5a0d8575a093fa2fe6c1
-
SHA1
e68a5bbcc35caca87e77af22833658c6a881ab8c
-
SHA256
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b
-
SHA512
41f4c81cd792546a53781f805a4d0accbbe7b66295deebec9cc52711554031b1e4942085d9c371204af947ca995eab9eb92d1812790e7dbb98681240f05cdc4c
-
SSDEEP
24576:MbgG0BHv4m+85ACmZQLwoLfQ01PRBad/XpD7AoR:2gL+ohmZewoLfxRA17J
Static task
static1
Behavioral task
behavioral1
Sample
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b
-
Size
850KB
-
MD5
b42ae7a9d44a5a0d8575a093fa2fe6c1
-
SHA1
e68a5bbcc35caca87e77af22833658c6a881ab8c
-
SHA256
2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b
-
SHA512
41f4c81cd792546a53781f805a4d0accbbe7b66295deebec9cc52711554031b1e4942085d9c371204af947ca995eab9eb92d1812790e7dbb98681240f05cdc4c
-
SSDEEP
24576:MbgG0BHv4m+85ACmZQLwoLfQ01PRBad/XpD7AoR:2gL+ohmZewoLfxRA17J
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
cff85c549d536f651d4fb8387f1976f2
-
SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
-
SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
-
SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
-
SSDEEP
192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
Score3/10 -