Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
06022025_1459_05022025_DHL Takip-pdf.7z
-
Size
1009KB
-
Sample
250206-sc399axrgs
-
MD5
ad0d8134031dc367dc0d8b016635c92c
-
SHA1
54e401964312e396d3fe698bb6d7b846a28ac34e
-
SHA256
f56b71aa51f5592b7dccb011ce108f898fd911d4e58d0d32e519d80f5d182963
-
SHA512
7ebd94ce3af8ec4bbd1252e4b8f9928c98b487a4d70826228226a83334f97c7b6b8d66431b23a65c1fa7addb18d66a2774b55038a1555e43d7905bf8bc85980f
-
SSDEEP
24576:pz019eeA3refAtexCXzC2OSkATU4f/YIYBYZdV:d019eecr0FCXzVpNAAwPC1
Static task
static1
Behavioral task
behavioral1
Sample
DHL Takip-pdf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
DHL Takip-pdf.exe
Resource
win10v2004-20250129-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250129-en
Malware Config
Targets
-
-
Target
DHL Takip-pdf.bat
-
Size
1.0MB
-
MD5
62fed8d2f8c74245e366b5ffc4170325
-
SHA1
c9ad60cf5921d12fed075927b4cf4623d129a671
-
SHA256
2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6
-
SHA512
3dd9b6dba45b75f39a6430fa0a6471dbda9b42cea021b37faefd72eb00fc3886b038afb88b51d9dfd6e313e5cdf07fdc33a026b827d3037dcd291e3d2316d714
-
SSDEEP
24576:+5TSjeuARbeLYMexXYvRCEOYkYRU2fNYwYtYPY:+kjeu0bx5ovRH1bqyuXOg
Score10/10-
Guloader family
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
cf85183b87314359488b850f9e97a698
-
SHA1
6b6c790037eec7ebea4d05590359cb4473f19aea
-
SHA256
3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac
-
SHA512
fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b
-
SSDEEP
96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug
Score3/10 -