Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Attached i...up.exe

windows7_x64

8

Attached i...up.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Attached is the new order, mecano group.exe

  • Size

    1.1MB

  • Sample

    200713-st7z41n47x

  • MD5

    727396a68b9b5cbf700d7b948db6d830

  • SHA1

    bd50594103f8554d8e076f0cc3a5a65c95586bee

  • SHA256

    ca1d053d41842ab4052e83f395cfef43d3b79f16a5c437fbfcc10fef27c97ca8

  • SHA512

    a1a1129d9630a3731daaf22bf67baa655bf8026da116e69d008641e9697dbaab9ac78a6a2c5acdeb733df64c8a343c88ef822adf07ace41cf95fbb64d8c0f3df

Score
8/10
evasionpersistencespywaretrojan

Malware Config

Targets

    • Target

      Attached is the new order, mecano group.exe

    • Size

      1.1MB

    • MD5

      727396a68b9b5cbf700d7b948db6d830

    • SHA1

      bd50594103f8554d8e076f0cc3a5a65c95586bee

    • SHA256

      ca1d053d41842ab4052e83f395cfef43d3b79f16a5c437fbfcc10fef27c97ca8

    • SHA512

      a1a1129d9630a3731daaf22bf67baa655bf8026da116e69d008641e9697dbaab9ac78a6a2c5acdeb733df64c8a343c88ef822adf07ace41cf95fbb64d8c0f3df

    Score
    8/10
    persistencespywareevasiontrojan

    • Adds Run entry to policy start application

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run entry to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks