Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08112024_0342_Updater.zip

  • Size

    64KB

  • MD5

    e9a3d1601821ba17587b12f1fad693b2

  • SHA1

    9f83e29974fdac8c0eb37dc10155502ac1c8a4db

  • SHA256

    c4e9ccca525c21d719b3ee8547e84934942d1d18cd96374eb61c2e99cdd7f103

  • SHA512

    bb22f6d7b888cdc19a6204b9205863850bbf6b67715528a6aafe62876009da6b181e267fbc604c9a289774f9049a93ede91bb6825320f43349f3985ed3060dba

  • SSDEEP

    1536:fT4pMmJHW9tElNSnU2vl7Ws7RtUkr04b4jYI:MSC28lNP2d7WgRNb+YI

Score
10/10

Malware Config

Extracted

Family

warmcookie

Attributes
  • mutex

    65abfc80-a660-4691-a919-130dc9b75b98

Signatures

  • Warmcookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08112024_0342_Updater.zip
    .zip

    Password: infected

  • Updater.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    13a0a4f8e18482fece5db74f0e485dc8


    Headers

    Imports

    Exports

    Sections

  • launcher.bat