Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be
-
Size
3.9MB
-
Sample
240423-r13sysha81
-
MD5
0d28c308c7d3af1f50a24cd98d59adbe
-
SHA1
617eb940a77fffe2e8363f9a11430ebb56b4c988
-
SHA256
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be
-
SHA512
d71da6edef67bc977ac8564f75cc0e8cdd31c0a9b37253017122f522c4d2f1ece5d8a56642dab40e3d8651ad1d1233ba0a27f78a536ddf897ddd392dbebb5ae8
-
SSDEEP
49152:/YQ9p/TMILu3UAJvYIJ7PBJw47zI8gFEtYnEZhNa+uOTapp5pP7eoi:DpgQEZPPT4Yj
Static task
static1
Behavioral task
behavioral1
Sample
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be.exe
Resource
win11-20240412-en
Malware Config
Targets
-
-
Target
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be
-
Size
3.9MB
-
MD5
0d28c308c7d3af1f50a24cd98d59adbe
-
SHA1
617eb940a77fffe2e8363f9a11430ebb56b4c988
-
SHA256
f917cbb00490f27691097081db77cc38d0f776d374b2fbd40e4b592eeef578be
-
SHA512
d71da6edef67bc977ac8564f75cc0e8cdd31c0a9b37253017122f522c4d2f1ece5d8a56642dab40e3d8651ad1d1233ba0a27f78a536ddf897ddd392dbebb5ae8
-
SSDEEP
49152:/YQ9p/TMILu3UAJvYIJ7PBJw47zI8gFEtYnEZhNa+uOTapp5pP7eoi:DpgQEZPPT4Yj
-
Detect ZGRat V1
-
XMRig Miner payload
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-