Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
20241001fecfab9e9ab673233f86f017b737df6fhijackloaderpoetratsnatch
-
Size
9.5MB
-
Sample
241001-gskbjayblg
-
MD5
fecfab9e9ab673233f86f017b737df6f
-
SHA1
7ae1cdf08d3d8c0a494121c9a93e123c0fdffa5c
-
SHA256
ab1056137f6bd63c2005889bd3643fff3e6958a039c4c5563319a8de6cd6bdec
-
SHA512
877c5f3b41dcd15c368a3014122f21751d76c352cba2b1641e9cc82aaf0118c267ce724f3e6f52a2fcd8328cbaef9effba852bb1b7f0c219bb30d0d77364057e
-
SSDEEP
98304:OyzcoE+ecjECo8Vy0TRI6ZPO6fjezEj+iM:f5Ry0e
Static task
static1
Behavioral task
behavioral1
Sample
20241001fecfab9e9ab673233f86f017b737df6fhijackloaderpoetratsnatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://reinforcenh.shop/api
https://stogeneratmns.shop/api
https://fragnantbui.shop/api
https://drawzhotdog.shop/api
https://vozmeatillu.shop/api
https://offensivedzvju.shop/api
https://ghostreedmnu.shop/api
https://gutterydhowi.shop/api
Extracted
lumma
https://offeviablwke.site/api
Targets
-
-
Target
20241001fecfab9e9ab673233f86f017b737df6fhijackloaderpoetratsnatch
-
Size
9.5MB
-
MD5
fecfab9e9ab673233f86f017b737df6f
-
SHA1
7ae1cdf08d3d8c0a494121c9a93e123c0fdffa5c
-
SHA256
ab1056137f6bd63c2005889bd3643fff3e6958a039c4c5563319a8de6cd6bdec
-
SHA512
877c5f3b41dcd15c368a3014122f21751d76c352cba2b1641e9cc82aaf0118c267ce724f3e6f52a2fcd8328cbaef9effba852bb1b7f0c219bb30d0d77364057e
-
SSDEEP
98304:OyzcoE+ecjECo8Vy0TRI6ZPO6fjezEj+iM:f5Ry0e
-
Suspicious use of SetThreadContext
-