Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb
-
Size
2.3MB
-
Sample
240928-3vthwa1fmq
-
MD5
f3c617fd5d59a2acdc8d69c84d65d76e
-
SHA1
965c7dc9b4a773e03c8d33257182ca0aaae1e48b
-
SHA256
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb
-
SHA512
3d8242ec6ea531b12a6110c7664c393d97548fa88d6b5c818d138137bc99bb93848e438294ea97a9f752560d68117636240c2364db5eb43f40fc87e90fbd9fb5
-
SSDEEP
49152:ujvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:urkI9rSjA5aDo73pzF2bz3p9y4HgIoov
Static task
static1
Behavioral task
behavioral1
Sample
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb
-
Size
2.3MB
-
MD5
f3c617fd5d59a2acdc8d69c84d65d76e
-
SHA1
965c7dc9b4a773e03c8d33257182ca0aaae1e48b
-
SHA256
8168cfffcb1d97b08b1892063bd84589bea9333c7b7db5bbb87cc85ddd8620cb
-
SHA512
3d8242ec6ea531b12a6110c7664c393d97548fa88d6b5c818d138137bc99bb93848e438294ea97a9f752560d68117636240c2364db5eb43f40fc87e90fbd9fb5
-
SSDEEP
49152:ujvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:urkI9rSjA5aDo73pzF2bz3p9y4HgIoov
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-