Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

FL64 (scaled).exe

windows7-x64

5

FL64 (scaled).exe

windows10-2004-x64

5

FL64.exe

windows7-x64

5

FL64.exe

windows10-2004-x64

5

FLEngine_x64.dll

windows7-x64

10

FLEngine_x64.dll

windows10-2004-x64

5

FLEngine_x...y1.dll

windows7-x64

5

FLEngine_x...y1.dll

windows10-2004-x64

5

FLEngine_x...y2.dll

windows7-x64

5

FLEngine_x...y2.dll

windows10-2004-x64

5

FLEngine_x...y3.dll

windows7-x64

5

FLEngine_x...y3.dll

windows10-2004-x64

5

FLEngine_x...y4.dll

windows7-x64

5

FLEngine_x...y4.dll

windows10-2004-x64

5

FLEngine_x...y5.dll

windows7-x64

5

FLEngine_x...y5.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Crack Fix.zip

  • Size

    305.3MB

  • Sample

    240509-wwk5kafg7z

  • MD5

    74caaed76d08bb42d6d918eed6007b74

  • SHA1

    c6a8ef082c00a72dcd390d2cea2bf66a65475cde

  • SHA256

    df63df335d4e3307bb952c16aef542177187fa3efbde9d7483b207812d4e1e72

  • SHA512

    db91eff8fc0f286777c6a2e26db90965075c24d26524d205d454f271fd384b422ce614ac5fafeccd07c9ade03ac46e3b81dd30f96b257de5002fdefed2b56b3a

  • SSDEEP

    6291456:2WaVhN/DcjhSWaVhN/DcOWaVhN/DcBWaVhN/DcoWaVhN/DczWaVhN/Dcu:2J1/DcjhSJ1/DcOJ1/DcBJ1/DcoJ1/De

Score
10/10
privateloaderloader

Malware Config

Targets

    • Target

      FL64 (scaled).exe

    • Size

      2.9MB

    • MD5

      4757429c07db24a1a4ab4e8396951e11

    • SHA1

      11f0b7c80f494b194ee319ee2833a81712ec8890

    • SHA256

      840cac6b0a18d520877554f0e59a2bf7c3681e673829882718eb99e19d1611fd

    • SHA512

      b5ff641b00b9d693565d603c1e32177aa15b9c185cf0b3b30323e4431cebec69b0246ab5f6a0ba3b8de91d3a3b0072dbf9930ad2826c9f4611e84b24e35f607f

    • SSDEEP

      49152:kbQUGviYVTh4zNyUlfNGcmmAj73+W91r2frAMSFI8WjhGTh7vrhsOV:tUEiYD4gURRUjaq+GhsOV

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      FL64.exe

    • Size

      2.9MB

    • MD5

      3ca6520c75713fe3a4871a8c5be4c2da

    • SHA1

      d7175a6d9d580b38b76e55fe41dd2c0dac5ae185

    • SHA256

      99c11dcae1886c8a6cd79000f3a58b86f11e904f8552b95b5f4598d9aa6e98e8

    • SHA512

      6586dfa3b60c70f5894116aae1240c36a780c5d79b864e95d717f0931e8f2a0f109ff4f5b7c9b3d67f3c18dee629cd482beda87becd7401dbb668e4e23c2c8fb

    • SSDEEP

      49152:rbQUGvbm3zQVV95iEOvjDc1kjPc8aqj/2YjXvcL/2NXydBbszpozS/EADO:AUEbm6V95RQjDpjVLj/TXySp6HMO

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

    • Target

      FLEngine_x64.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    10/10
    privateloaderloader

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral5behavioral6

    • Target

      FLEngine_x64_Copy1.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral7behavioral8

    • Target

      FLEngine_x64_Copy2.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral10behavioral9

    • Target

      FLEngine_x64_Copy3.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral11behavioral12

    • Target

      FLEngine_x64_Copy4.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral13behavioral14

    • Target

      FLEngine_x64_Copy5.dll

    • Size

      63.3MB

    • MD5

      06bb6dde5c9adbac93470ed86ce7d5ff

    • SHA1

      46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a

    • SHA256

      2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525

    • SHA512

      5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23

    • SSDEEP

      786432:iJfMakY21meWZcB9fM/4F+cJ/HKYVVCmS0fkrw632FfsjA2E27Dy:ek+W/FRsYVV0/rVmEE2h7+

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral15behavioral16

MITRE ATT&CK Matrix

Tasks