Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668
-
Size
902KB
-
Sample
240315-16feaacc7x
-
MD5
a68d14864bb6f05cc198d982ebd19e5a
-
SHA1
7d6cfd2510df683555241a64f33c08ebbf2dffe6
-
SHA256
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668
-
SHA512
ee9fe1df9407b36d652167440b9ab97725827b9907cbe144bf3c50486a8a07026ff343279c2992898c53f44df2bb40343a01a5d87a1cd45e281f3c7f9a84c278
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5M:gh+ZkldoPK8YaKGM
Static task
static1
Behavioral task
behavioral1
Sample
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668
-
Size
902KB
-
MD5
a68d14864bb6f05cc198d982ebd19e5a
-
SHA1
7d6cfd2510df683555241a64f33c08ebbf2dffe6
-
SHA256
9bc4d71c9f3c6d6a545ec56e4afa5ebffad5cb5c84db7d697f62926fd85b2668
-
SHA512
ee9fe1df9407b36d652167440b9ab97725827b9907cbe144bf3c50486a8a07026ff343279c2992898c53f44df2bb40343a01a5d87a1cd45e281f3c7f9a84c278
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5M:gh+ZkldoPK8YaKGM
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-