Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

Release/Phantom.exe

windows7-x64

6

Release/Phantom.exe

windows10-2004-x64

6

Release/Re...ub.ps1

windows7-x64

3

Release/Re...ub.ps1

windows10-2004-x64

3

Release/Re...er.exe

windows7-x64

Release/Re...er.exe

windows10-2004-x64

Release/Re...tub.js

windows7-x64

3

Release/Re...tub.js

windows10-2004-x64

3

Release/Re...AC.dll

windows7-x64

1

Release/Re...AC.dll

windows10-2004-x64

3

Release/Re...64.dll

windows7-x64

1

Release/Re...64.dll

windows10-2004-x64

1

Release/Re...ut.exe

windows7-x64

1

Release/Re...ut.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Release.rar

  • Size

    1.6MB

  • MD5

    18f5e8a2942ceb42136470a8b07e60d2

  • SHA1

    81bb9cbf8d3bd5827868d4a85041ac74d11dc8af

  • SHA256

    8b56d75369b933d12b1468863c0fd035a36e0781c928683d2e315cd05fbc05b2

  • SHA512

    67945aedca781c21684e9b467913da59e32a87a4ded1a81264fce6c56aeef80e64e39b89d4bf28057e5ea9eec38900e2ae097e8716b731cdf8370ffb61defb7a

  • SSDEEP

    24576:cWLVkYE5635ZOH/qJq0uX5NVs+xCl6bp4zEgVcHpfXEQwHn0bbeP+mp1UDPG5n+9:pKYnkHCE0WVseYYgmJfU19d1UsTtN6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.rar
    .rar
  • Release/Newtonsoft.Json.xml
    .xml
  • Release/Phantom.exe
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Release/Resources/AESStub.ps1
    .ps1
  • Release/Resources/BStub.cs
  • Release/Resources/Stager.exe
  • Release/Resources/Stub.cs
    .js
  • Release/Resources/UAC.dll
    .dll windows:6 windows x86 arch:x86

    c4fb693cdae216d76191b1cd48548e4d


    Headers

    Imports

    Exports

    Sections

  • Release/Resources/UAC64.dll
    .dll windows:6 windows x64 arch:x64

    086ddeeaec7d7f2ccae2bd45a6bd3589


    Headers

    Imports

    Exports

    Sections

  • Release/Resources/donut.exe
    .exe windows:6 windows x64 arch:x64

    ef81b9a18c758ad2cb875d81e1e4b658


    Headers

    Imports

    Sections

  • Release/System.Diagnostics.DiagnosticSource.xml
    .xml
  • Release/System.ValueTuple.xml
    .xml
  • Release/bin/latestversion
  • Release/bin/settings.json
  • Release/dnlib.xml
    .xml

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.