Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08aabef266a451bbcd57608acbd397d827d8aa2206e25c24ce61e1e7fcad7eb1.zip

  • Size

    792KB

  • MD5

    63771196ddc309192e4ea83c9cfabcbe

  • SHA1

    fbe29d1ce4583a25bd925dd588e9cc44e16abc7f

  • SHA256

    08aabef266a451bbcd57608acbd397d827d8aa2206e25c24ce61e1e7fcad7eb1

  • SHA512

    8c8d13d56e0c7364f8f06ae127afa1bd4626d0ed3c16c9a0ab2a50b35524bbc1ab18ab95ae8dec432a106357bd596698191b546de71c09f038376012a354450b

  • SSDEEP

    24576:lX4pttEZ+E8vDygn8dEbqNlZlKFyzMbVzgxT5kXW9ygVOUB:lXdZKvhn8d/XZlKFnbBiccB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 08aabef266a451bbcd57608acbd397d827d8aa2206e25c24ce61e1e7fcad7eb1.zip
    .rar

    Password: infected

  • Cyber Ghost VPN + Key master.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • README.txt
  • dmview.ocx
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    cade1bb83eee406153899628af9ee28a


    Headers

    Imports

    Exports

    Sections

  • dnscmmc.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    3922b90b5a2eecbfa5765ccf4dbe450f


    Headers

    Imports

    Exports

    Sections

  • elshyph.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    b6b3ace989c6db7ab2cafc69ea32ef86


    Headers

    Imports

    Exports

    Sections