Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86.exe
Resource
win10v2004-20241007-en
General
-
Target
3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86
-
Size
120KB
-
MD5
a0b53bf8f426f52470edcdf72aae59e2
-
SHA1
b05b82419d5c3888e7fabcf30c50387e4ecc88ed
-
SHA256
3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86
-
SHA512
9f16e374344eea0de74dcbb2e35d593cd144b6a7e34fe4805e175d0ccd2288dd79d0c004b4b2c944efef115a598e0ac5161d7c506c2464bd709bd5bb48d540f8
-
SSDEEP
1536:xqsK1tqzClbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed23tmulgS6p:f2tAyYr+zi0ZbYe1g0ujyzdn
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86
Files
-
3fbbbf8279e2cb45f41e335f25ffa6fea6bed0698f701f1648d95765b3a95c86.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ