Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

82da11e2db...8N.exe

windows7-x64

10

82da11e2db...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82da11e2dbaf80dbf275071a8ffed716624df9197a7872437a90cc99ba891ff8N

  • Size

    80KB

  • MD5

    6ab590bdeb852930d0fb288cd9d1dff0

  • SHA1

    226cb2fe948d27d648d938db1d27ddd49c63c3ba

  • SHA256

    82da11e2dbaf80dbf275071a8ffed716624df9197a7872437a90cc99ba891ff8

  • SHA512

    938821833d9f79ea2c0025ee05325b9f229326e62a6507c77990b441e537fac2d44b8620bf425ee0472dc7ab1e84f7c2386d6b86536ef1b3d391ded7e422b155

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshhjzJxuOmb54vHTL+lf:Qi5ikFSofSzVmb5uHv+lf

Score
10/10
hackedblacknet

Malware Config

Extracted

Family

blacknet

Botnet

HacKed

C2

https://www.gunnylaumienphi2017.com/

Mutex

BN[qNldZlCR-8683277]

Attributes
  • antivm

    true

  • elevate_uac

    false

  • install_name

    WindowsUpdate.exe

  • splitter

    |BN|

  • start_name

    cde2f914e4cce7f13b2c1cec7b6da970

  • startup

    false

  • usb_spread

    true

Signatures

  • BlackNET payload 1 IoCs
  • Blacknet family
    blacknet
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 82da11e2dbaf80dbf275071a8ffed716624df9197a7872437a90cc99ba891ff8N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.