Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
szerzds-pdf.bat.exe
-
Size
811KB
-
Sample
250326-kppcvszxdx
-
MD5
8c9a9c036d90711993d0fa59761035fc
-
SHA1
9fb68ab16c2be99334b2436c5222e3cb75e4fa2c
-
SHA256
0967e819ae99a6ff7e6e5d1320f6627e25bb643eff4b3cc21f8002fc2eda272e
-
SHA512
96721499a6e6b891b0c644f506acb124b9f880c0a58e5980047ef5b013455f2902d8d710ac8e969b6d5e0e36f9bf1bab3e54047743757d2e09e3c951969f9e89
-
SSDEEP
24576:mdYAD9m2Yf+DlEhoicwrJnj+XjBxhaYPAYGuxcDKLT:mX9mfhoizRyXHC/DKLT
Static task
static1
Behavioral task
behavioral1
Sample
szerzds-pdf.bat.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
szerzds-pdf.bat.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
szerzds-pdf.bat.exe
-
Size
811KB
-
MD5
8c9a9c036d90711993d0fa59761035fc
-
SHA1
9fb68ab16c2be99334b2436c5222e3cb75e4fa2c
-
SHA256
0967e819ae99a6ff7e6e5d1320f6627e25bb643eff4b3cc21f8002fc2eda272e
-
SHA512
96721499a6e6b891b0c644f506acb124b9f880c0a58e5980047ef5b013455f2902d8d710ac8e969b6d5e0e36f9bf1bab3e54047743757d2e09e3c951969f9e89
-
SSDEEP
24576:mdYAD9m2Yf+DlEhoicwrJnj+XjBxhaYPAYGuxcDKLT:mX9mfhoizRyXHC/DKLT
Score10/10-
Guloader family
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
9625d5b1754bc4ff29281d415d27a0fd
-
SHA1
80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
-
SHA256
c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
-
SHA512
dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
-
SSDEEP
192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
Score3/10 -