Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3.exe
-
Size
824KB
-
Sample
250101-svy39asqfk
-
MD5
23e3f8ab1dd0d444f0a332c0b27e47b1
-
SHA1
194473c912d907ea589b358efba53a5cd1da9e66
-
SHA256
9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3
-
SHA512
d27aaa1d56a828681a312c45912240baff4a269d3c375984edb96d4a925acfa59c652743dc64d122975d30de69f3e32df217efd23290995369ce2845fc869d41
-
SSDEEP
12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEE888888888888W8888888j:TNzCtUpQ9WWPBSSRMTEpXNi
Behavioral task
behavioral1
Sample
9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3.exe
Resource
win7-20241010-en
Malware Config
Targets
-
-
Target
9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3.exe
-
Size
824KB
-
MD5
23e3f8ab1dd0d444f0a332c0b27e47b1
-
SHA1
194473c912d907ea589b358efba53a5cd1da9e66
-
SHA256
9ecb94d325ed282977372803e2e7f86d15d2e5558a98e8da9b951453c33ea1c3
-
SHA512
d27aaa1d56a828681a312c45912240baff4a269d3c375984edb96d4a925acfa59c652743dc64d122975d30de69f3e32df217efd23290995369ce2845fc869d41
-
SSDEEP
12288:nwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEE888888888888W8888888j:TNzCtUpQ9WWPBSSRMTEpXNi
-
Detects Renamer worm.
Renamer aka Grename is worm written in Delphi.
-
Renamer family
-
Drops startup file
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-