Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Release-x64.zip

  • Size

    38.9MB

  • MD5

    36f9005784b19cc8f7448390e997a2c1

  • SHA1

    140fefa1d80a828795c03f52ad28002b5d9635d2

  • SHA256

    f6a6bada54ddce2bc211976e7dfe05c89f4780eab1b992b409dacc7c9b8755b7

  • SHA512

    131d1cbb777c1e428b26b870a9f5626f3ed76c97fb9ef9cfb22fb8204da510336e065e71c18a47b3cc31495082ffcab7a37be88a4922dd2956bb73ef1eb6d76c

  • SSDEEP

    786432:v7mya0tlAZkF2k3ya5OzccWkjzuWUKorpBsdDdtd3vA5BsdDdtd3vAD5:zojZ62u56cceWUvpBsDbo5BsDbo1

Score
9/10

Malware Config

Signatures

  • CryptOne packer 2 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Release-x64.zip
    .zip
  • README.txt
  • Release-x64/README.txt
  • Release-x64/Release/Bootstrapper.exe
    .exe windows:5 windows x86 arch:x86

    e19d96f939a651e42cb688654b2bc5fb


    Headers

    Imports

    Sections

  • Release-x64/Release/scripts/config.txt
    .js
  • Release-x64/Release/scripts/local
    .dll regsvr32 windows:5 windows x86 arch:x86

    a9fd3e7f71a802c8eee0a502f46de991


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Release-x64/Release/scripts/scripthub
    .dll regsvr32 windows:5 windows x86 arch:x86

    a9fd3e7f71a802c8eee0a502f46de991


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Release-x64/Release/scripts/uwp
    .dll windows:6 windows x86 arch:x86

    1c23c1ea89b7252f3716da06ebe3581f


    Headers

    Imports

    Exports

    Sections