Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
7freeSpoofe...er.exe
windows7-x64
10freeSpoofe...er.exe
windows10-2004-x64
10freeSpoofe...64.exe
windows7-x64
1freeSpoofe...64.exe
windows10-2004-x64
1freeSpoofe...64.exe
windows7-x64
1freeSpoofe...64.exe
windows10-2004-x64
1freeSpoofe...64.sys
windows10-2004-x64
1freeSpoofe...64.exe
windows7-x64
1freeSpoofe...64.exe
windows10-2004-x64
1freeSpoofe...64.sys
windows10-2004-x64
1freeSpoofe..._2.exe
windows7-x64
9freeSpoofe..._2.exe
windows10-2004-x64
9freeSpoofe...64.sys
windows10-2004-x64
1freeSpoofe...er.exe
windows7-x64
7freeSpoofe...er.exe
windows10-2004-x64
7freeSpoofe...AC.exe
windows7-x64
3freeSpoofe...AC.exe
windows10-2004-x64
3freeSpoofe...p.html
windows7-x64
3freeSpoofe...p.html
windows10-2004-x64
3Analysis
-
max time kernel
93s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2025, 16:02
Behavioral task
behavioral1
Sample
freeSpoofer/freeSpoofer.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
freeSpoofer/freeSpoofer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
freeSpoofer/tools/AFUWINx64.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
freeSpoofer/tools/AFUWINx64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
freeSpoofer/tools/AMIDEWINx64.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
freeSpoofer/tools/AMIDEWINx64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
freeSpoofer/tools/LeCrud64.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
freeSpoofer/tools/Volumeid64.exe
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
freeSpoofer/tools/Volumeid64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
freeSpoofer/tools/amigendrv64.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
freeSpoofer/tools/applecleaner_2.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
freeSpoofer/tools/applecleaner_2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
freeSpoofer/tools/lvafudrv64.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
freeSpoofer/tools/tmac/Installer.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
freeSpoofer/tools/tmac/Installer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
freeSpoofer/tools/tmac/TMAC.exe
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
freeSpoofer/tools/tmac/TMAC.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
freeSpoofer/tools/tmac/help.html
Resource
win7-20241010-en
Behavioral task
behavioral19
Sample
freeSpoofer/tools/tmac/help.html
Resource
win10v2004-20241007-en
General
-
Target
freeSpoofer/tools/AFUWINx64.exe
-
Size
1015KB
-
MD5
59a47fc8e9b4396dddb52907a8a54177
-
SHA1
d16c0825ea1ce721b00df160d826475fda2bae44
-
SHA256
03e11400f15251c9bf2d764b1020f32904f9569a426adfbe26b21e04898c8800
-
SHA512
e857e9627b811d48510e14f0b8e65a12eb4153d0e05ad322cc8b95f6ee5c52cc018a1073acecbed43148de26e5c252ae9a2a6d5fdda1b585dfc41f030bb2f6e3
-
SSDEEP
24576:xplWGl3HtCFYAQaYe9pwD+yweJUCHHWDa:8Ye9K+5L
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 64 IoCs
pid Process 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found 668 Process not Found