Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://download2301.mediafire.com/2mu64mh5sbbg7h-4KbXdHh_VCs-e-7F2q6lA8rVkUCgaYGq8WBmdjZZpwuvuAuYb6adpEko9kZXX7mJv3AJBXWgV-iDtEZU5SY8HpXzWohBW_Zl4G_rXinRL0xnWNaickp17hQtzZympqARp9Uj-Yb7x6kIJf6dSlzcgnaCiSw/401sbyp3tyvb4hf/Armageddon.zip
-
Sample
250314-2gcsjazzc1
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://download2301.mediafire.com/2mu64mh5sbbg7h-4KbXdHh_VCs-e-7F2q6lA8rVkUCgaYGq8WBmdjZZpwuvuAuYb6adpEko9kZXX7mJv3AJBXWgV-iDtEZU5SY8HpXzWohBW_Zl4G_rXinRL0xnWNaickp17hQtzZympqARp9Uj-Yb7x6kIJf6dSlzcgnaCiSw/401sbyp3tyvb4hf/Armageddon.zip
Resource
win11-20250314-en
Malware Config
Targets
-
-
Target
https://download2301.mediafire.com/2mu64mh5sbbg7h-4KbXdHh_VCs-e-7F2q6lA8rVkUCgaYGq8WBmdjZZpwuvuAuYb6adpEko9kZXX7mJv3AJBXWgV-iDtEZU5SY8HpXzWohBW_Zl4G_rXinRL0xnWNaickp17hQtzZympqARp9Uj-Yb7x6kIJf6dSlzcgnaCiSw/401sbyp3tyvb4hf/Armageddon.zip
Score10/10-
Detects Rhadamanthys payload
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of SetThreadContext
-