Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
winrm.exe
-
Size
237KB
-
Sample
240409-vc161agc3x
-
MD5
df064a338e25472686ea67ba3c01e780
-
SHA1
74ee5ba66f2593c40842607a7d322f2025c7d087
-
SHA256
dd8cef242016ac16e7d62b63dbb946481b751a339efb79911da1d4c654246097
-
SHA512
b4848baf036a380882734aad30c1e35fc8d3930b04af018767522ce29b4400ed366480f00fa8379985527aa044bc3c26adfdd8d3395cd09c50d40dac36abe3e9
-
SSDEEP
3072:K0F1weiSOsF1DUREGAltfZP+fqJIiJHnbsI+cnl2fZd+G:v1JiSoEGAlVpEqXnbsvcnI
Static task
static1
Behavioral task
behavioral1
Sample
winrm.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
winrm.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
winrm.exe
-
Size
237KB
-
MD5
df064a338e25472686ea67ba3c01e780
-
SHA1
74ee5ba66f2593c40842607a7d322f2025c7d087
-
SHA256
dd8cef242016ac16e7d62b63dbb946481b751a339efb79911da1d4c654246097
-
SHA512
b4848baf036a380882734aad30c1e35fc8d3930b04af018767522ce29b4400ed366480f00fa8379985527aa044bc3c26adfdd8d3395cd09c50d40dac36abe3e9
-
SSDEEP
3072:K0F1weiSOsF1DUREGAltfZP+fqJIiJHnbsI+cnl2fZd+G:v1JiSoEGAlVpEqXnbsvcnI
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-