Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

24b8c08f3a...aN.exe

windows7-x64

10

24b8c08f3a...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079faN

  • Size

    83KB

  • MD5

    d6bf876b730dd03903fbac092d7294e0

  • SHA1

    872f6521b5828c2b1f34398c42b405936e17579f

  • SHA256

    24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079fa

  • SHA512

    394f235c590c16d9ef847ede11e09a1bfa5ebaae922c2172f747bf5e83beb87b6b94ae18c4c0cce0170aa6449fcb9b439470d9c0362ea109f693f33d7d401732

  • SSDEEP

    1536:PwPvK/3zvzVohd9BRiF/JUWjzJxuOmb54vHTLazm7/:PwiGDjiVdzVmb5uHvmm7/

Score
10/10
hackedblacknet

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[UpPHDOfu-4248733]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    cde2f914e4cce7f13b2c1cec7b6da970

  • startup

    false

  • usb_spread

    true

Signatures

  • BlackNET payload 1 IoCs
  • Blacknet family
    blacknet
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24b8c08f3a8a961bac9837a46fa2bdb4baca36b64dac3830a33580a6dfd079faN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections