Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cb8a3b3334911d0e1f927b1571c2872e93c888d64bf416eb9713b5bfc165ee0d
-
Size
1.4MB
-
Sample
241001-ftqn9swdrf
-
MD5
e5f2bd9416302de2c778508dabfaa389
-
SHA1
8981a87d9844a85379476f92ca3019750ada36e0
-
SHA256
cb8a3b3334911d0e1f927b1571c2872e93c888d64bf416eb9713b5bfc165ee0d
-
SHA512
1cde375a8364284412b599f4a65a067138f7412d2671fa83c460877d1e8dca47a13c10507a31d3516face67e403f2cef03456daebb788b044d5696390b1f4b66
-
SSDEEP
24576:o+JZpuIwJi1PTMrc0zEzpUH/bZxa4YEdSf1aXVE21sWVFfN:VwyTVAEzpUH/bjHYEdA1avs+FfN
Static task
static1
Behavioral task
behavioral1
Sample
quote prices.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
quote prices.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
quote prices.exe
-
Size
2.7MB
-
MD5
ebfef9cceabb8b7bae8fdd6da82818fb
-
SHA1
c434ac40f3a456f849a440001e0fdcae583f8eaa
-
SHA256
1dec2eb916877caf3b3fb23330de8cba38ba9bf743de5b72d0c7db5bf01f308c
-
SHA512
11fa839b9b4eab890cba026ea1cb9a928556da31da77460665e6146b25f84b9a001772f29b6ca3cb05899199e9d40d66126d4fed55eb4e122cd44e434c178f4d
-
SSDEEP
24576:WXbWGsSH8HfTn2McGGn2Gc89Jd46bV8YYDYDVBfzd7peh+cjZUYg+9Auof0AB:
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-