Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1FL64 (scaled).exe
windows7-x64
5FL64 (scaled).exe
windows10-2004-x64
5FL64.exe
windows7-x64
5FL64.exe
windows10-2004-x64
5FLEngine_x64.dll
windows7-x64
10FLEngine_x64.dll
windows10-2004-x64
5FLEngine_x...y1.dll
windows7-x64
5FLEngine_x...y1.dll
windows10-2004-x64
5FLEngine_x...y2.dll
windows7-x64
5FLEngine_x...y2.dll
windows10-2004-x64
5FLEngine_x...y3.dll
windows7-x64
5FLEngine_x...y3.dll
windows10-2004-x64
5FLEngine_x...y4.dll
windows7-x64
5FLEngine_x...y4.dll
windows10-2004-x64
5FLEngine_x...y5.dll
windows7-x64
5FLEngine_x...y5.dll
windows10-2004-x64
5General
-
Target
Crack Fix.zip
-
Size
305.3MB
-
Sample
240509-wwk5kafg7z
-
MD5
74caaed76d08bb42d6d918eed6007b74
-
SHA1
c6a8ef082c00a72dcd390d2cea2bf66a65475cde
-
SHA256
df63df335d4e3307bb952c16aef542177187fa3efbde9d7483b207812d4e1e72
-
SHA512
db91eff8fc0f286777c6a2e26db90965075c24d26524d205d454f271fd384b422ce614ac5fafeccd07c9ade03ac46e3b81dd30f96b257de5002fdefed2b56b3a
-
SSDEEP
6291456:2WaVhN/DcjhSWaVhN/DcOWaVhN/DcBWaVhN/DcoWaVhN/DczWaVhN/Dcu:2J1/DcjhSJ1/DcOJ1/DcBJ1/DcoJ1/De
Static task
static1
Behavioral task
behavioral1
Sample
FL64 (scaled).exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
FL64 (scaled).exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
FL64.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
FL64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
FLEngine_x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
FLEngine_x64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
FLEngine_x64_Copy1.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
FLEngine_x64_Copy1.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
FLEngine_x64_Copy2.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
FLEngine_x64_Copy2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
FLEngine_x64_Copy3.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
FLEngine_x64_Copy3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
FLEngine_x64_Copy4.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
FLEngine_x64_Copy4.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
FLEngine_x64_Copy5.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
FLEngine_x64_Copy5.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
FL64 (scaled).exe
-
Size
2.9MB
-
MD5
4757429c07db24a1a4ab4e8396951e11
-
SHA1
11f0b7c80f494b194ee319ee2833a81712ec8890
-
SHA256
840cac6b0a18d520877554f0e59a2bf7c3681e673829882718eb99e19d1611fd
-
SHA512
b5ff641b00b9d693565d603c1e32177aa15b9c185cf0b3b30323e4431cebec69b0246ab5f6a0ba3b8de91d3a3b0072dbf9930ad2826c9f4611e84b24e35f607f
-
SSDEEP
49152:kbQUGviYVTh4zNyUlfNGcmmAj73+W91r2frAMSFI8WjhGTh7vrhsOV:tUEiYD4gURRUjaq+GhsOV
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FL64.exe
-
Size
2.9MB
-
MD5
3ca6520c75713fe3a4871a8c5be4c2da
-
SHA1
d7175a6d9d580b38b76e55fe41dd2c0dac5ae185
-
SHA256
99c11dcae1886c8a6cd79000f3a58b86f11e904f8552b95b5f4598d9aa6e98e8
-
SHA512
6586dfa3b60c70f5894116aae1240c36a780c5d79b864e95d717f0931e8f2a0f109ff4f5b7c9b3d67f3c18dee629cd482beda87becd7401dbb668e4e23c2c8fb
-
SSDEEP
49152:rbQUGvbm3zQVV95iEOvjDc1kjPc8aqj/2YjXvcL/2NXydBbszpozS/EADO:AUEbm6V95RQjDpjVLj/TXySp6HMO
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64_Copy1.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64_Copy2.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64_Copy3.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64_Copy4.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
FLEngine_x64_Copy5.dll
-
Size
63.3MB
-
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
-
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
-
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
-
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
-
SSDEEP
786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-