Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
63e3b4304b855b3219c28b8d5306241564ac5f1752a01b5b793ee7733b4c69a7
-
Size
632KB
-
Sample
240724-kh91zszekh
-
MD5
44e15810a7cc4c85a45c0d786e795904
-
SHA1
6a13dd37d6ab5a44c4ecdc602a8175d32ade0450
-
SHA256
63e3b4304b855b3219c28b8d5306241564ac5f1752a01b5b793ee7733b4c69a7
-
SHA512
7702302ec0a34ee53e3084a98f23f2af241c70f2c74eb08da948a95a0e9a8cbfacb27e76f7e3175f85b9e88da4d80fced80aafdf1d2739dfce28bee99864650b
-
SSDEEP
12288:wunSY+aZrwrLxdgGs2oPDNDZsS00YykWQ0F3ytl2In54Ci8wzk:n/4rLzgGsRBDZBkWQ0F35InfiR
Static task
static1
Behavioral task
behavioral1
Sample
63e3b4304b855b3219c28b8d5306241564ac5f1752a01b5b793ee7733b4c69a7.exe
Resource
win7-20240705-en
Malware Config
Extracted
formbook
4.1
v15n
dyahwoahjuk.store
toysstorm.com
y7rak9.com
2222233p6.shop
betbox2341.com
visualvarta.com
nijssenadventures.com
main-12.site
leng4d.net
kurainu.xyz
hatesa.xyz
culturamosaica.com
supermallify.store
gigboard.app
rxforgive.com
ameliestones.com
kapalwin.live
tier.credit
sobol-ksa.com
faredeal.online
226b.xyz
talktohannaford500.shop
mxrkpkngishbdss.xyz
mirotcg.info
turbo3club.site
hjnd28t010cop.cyou
marveloustep.shop
syedlatief.com
comfortableleather.com
alltradescortland.com
dnwgt80508yoec8pzq.top
kedai168ef.com
gelgoodlife.com
nxtskey.com
milliedevine.store
wordcraftart.fun
mpo525.monster
bt365851.com
dogeversetoken.net
boostgrowmode.com
dacapital.net
project21il.com
go4stores.com
brunoduarte.online
sexgodmasterclass.com
wuhey.shop
jdginl892e.xyz
agenkilat-official.space
hacks.digital
suv.xyz
fwbsmg.life
vicmvm649n.top
wbahdfw.icu
creativelyloud.com
merrycleanteam.com
solar-systems-panels-58747.bond
rotaryclubofmukono.com
bethanyumcnola.info
breezafan.com
ny-robotictoys.com
lawyers-br-pt-9390663.fyi
neurasaudi.com
dgccb.com
sayuri-walk.com
gtur.top
Targets
-
-
Target
63e3b4304b855b3219c28b8d5306241564ac5f1752a01b5b793ee7733b4c69a7
-
Size
632KB
-
MD5
44e15810a7cc4c85a45c0d786e795904
-
SHA1
6a13dd37d6ab5a44c4ecdc602a8175d32ade0450
-
SHA256
63e3b4304b855b3219c28b8d5306241564ac5f1752a01b5b793ee7733b4c69a7
-
SHA512
7702302ec0a34ee53e3084a98f23f2af241c70f2c74eb08da948a95a0e9a8cbfacb27e76f7e3175f85b9e88da4d80fced80aafdf1d2739dfce28bee99864650b
-
SSDEEP
12288:wunSY+aZrwrLxdgGs2oPDNDZsS00YykWQ0F3ytl2In54Ci8wzk:n/4rLzgGsRBDZBkWQ0F35InfiR
-
Formbook payload
-
Suspicious use of SetThreadContext
-