Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

185bf75489...2N.exe

windows7-x64

10

185bf75489...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    185bf754898dbf6684f95a7d7fb2b690759c6f18b31bec7f540ea55e1c571e52N

  • Size

    80KB

  • MD5

    80d55f99c5a519363b1e0b8a357b3c90

  • SHA1

    4f5104c585f8fbdc948ad244fe8ba05ef001d7dd

  • SHA256

    185bf754898dbf6684f95a7d7fb2b690759c6f18b31bec7f540ea55e1c571e52

  • SHA512

    2c00f5e4ba99b39aa1b7cc2c475e9bfdb70d6b6be80575aad25b183ab31e46d9bc7cbf4e99cbf0e8dd75f4ec1951514032ac9e3445d06833078cdc9c3bcb185c

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshVjzJxuOmb54vHTL+lf:Qi5ikFSofmzVmb5uHv+lf

Score
10/10
hackedblacknet

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[qNldZlCR-8683277]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    cde2f914e4cce7f13b2c1cec7b6da970

  • startup

    false

  • usb_spread

    true

Signatures

  • BlackNET payload 1 IoCs
  • Blacknet family
    blacknet
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 185bf754898dbf6684f95a7d7fb2b690759c6f18b31bec7f540ea55e1c571e52N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.