Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f986d73e44a2ac7d3ce0abfb23873844726e66822030a3643f56cca53f6164d2N.exe
-
Size
128KB
-
Sample
241226-h8ftqaznbk
-
MD5
c94589a64f785f1e02dea5f0657dd480
-
SHA1
2d572443ef06a153d72e94bbb0e33393f8e63e16
-
SHA256
f986d73e44a2ac7d3ce0abfb23873844726e66822030a3643f56cca53f6164d2
-
SHA512
411aab97a12cfaf58df0f24379643cc562ffc3a8a26e006ebf2722afe5adae025fbd0f72a786bef99694cef7f2b392f9d5a29084662fe171b0b933dfe9783572
-
SSDEEP
1536:DaKG1kKrKP9BEr3d9lvpTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQIqGZ:eKck5ErFvf2lQBV+UdE+rECWp7hKSGH5
Static task
static1
Behavioral task
behavioral1
Sample
f986d73e44a2ac7d3ce0abfb23873844726e66822030a3643f56cca53f6164d2N.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
f986d73e44a2ac7d3ce0abfb23873844726e66822030a3643f56cca53f6164d2N.exe
-
Size
128KB
-
MD5
c94589a64f785f1e02dea5f0657dd480
-
SHA1
2d572443ef06a153d72e94bbb0e33393f8e63e16
-
SHA256
f986d73e44a2ac7d3ce0abfb23873844726e66822030a3643f56cca53f6164d2
-
SHA512
411aab97a12cfaf58df0f24379643cc562ffc3a8a26e006ebf2722afe5adae025fbd0f72a786bef99694cef7f2b392f9d5a29084662fe171b0b933dfe9783572
-
SSDEEP
1536:DaKG1kKrKP9BEr3d9lvpTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQIqGZ:eKck5ErFvf2lQBV+UdE+rECWp7hKSGH5
-
Floxif family
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-