Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

22e4f35818...82.exe

windows7_x64

10

22e4f35818...82.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22e4f35818b256b89cd533718def4a707033dfa85814c5fbad5bf33f32280b82

  • Size

    156KB

  • Sample

    220511-rvg93aaad6

  • MD5

    2125f0d203d4ad5bfdb0ef158ada3995

  • SHA1

    ecfd879faf4f047541147617cb84a9638600212d

  • SHA256

    22e4f35818b256b89cd533718def4a707033dfa85814c5fbad5bf33f32280b82

  • SHA512

    ad301008fe4d5400f5b63beedbf654c0b61d06fa2d4083293925cba1d786712e094866c7c6dbffce4394c72dc5fbcd21025d04c33dde5668b0c1347cf6b9deb7

Score
10/10
chinese_generic_botnetbotnetpersistenceupxvmprotect

Malware Config

Targets

    • Target

      22e4f35818b256b89cd533718def4a707033dfa85814c5fbad5bf33f32280b82

    • Size

      156KB

    • MD5

      2125f0d203d4ad5bfdb0ef158ada3995

    • SHA1

      ecfd879faf4f047541147617cb84a9638600212d

    • SHA256

      22e4f35818b256b89cd533718def4a707033dfa85814c5fbad5bf33f32280b82

    • SHA512

      ad301008fe4d5400f5b63beedbf654c0b61d06fa2d4083293925cba1d786712e094866c7c6dbffce4394c72dc5fbcd21025d04c33dde5668b0c1347cf6b9deb7

    Score
    10/10
    chinese_generic_botnetbotnetpersistencevmprotect

    • Generic Chinese Botnet

      A botnet originating from China which is currently unnamed publicly.

      botnetchinese_generic_botnet

    • Chinese Botnet Payload

      botnet

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks