Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    10e6863438c559243979cfaf3e750d3244dbb7588dff6f12565cc8aa71c9b44dN

  • Size

    3.8MB

  • MD5

    6adf7c0d3e770b9962d9c976abd5d660

  • SHA1

    3c595298d93f1bc8c456f06c517097aa98275974

  • SHA256

    10e6863438c559243979cfaf3e750d3244dbb7588dff6f12565cc8aa71c9b44d

  • SHA512

    9a7ce9b89a26643b5e5dd24713228c0280dd8de1fcf88286c4e84940597f98ab74499701492433bbe80cb23c5288fa3540012f971a996a885f27fad8145c2f12

  • SSDEEP

    98304:Dg2KK3z9OP+9Rqc7h2BSUXfcrRk0kq4DfT:E2KKjQ+9RZ7lr23r

Malware Config

Extracted

Family

gozi

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Gozi family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 10e6863438c559243979cfaf3e750d3244dbb7588dff6f12565cc8aa71c9b44dN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections