Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

bdabe2bdb1...25.exe

windows7-x64

8

bdabe2bdb1...25.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdabe2bdb1fd5ffcf8d99f12d67bf97748d4c91dd9a43656c17984f392088525

  • Size

    127KB

  • Sample

    220919-tt2nesgdd6

  • MD5

    c44e5004816f80cee5e6e71bac7c63b6

  • SHA1

    a7ca5e713c635e4dff4998d43d4d61c3c4891449

  • SHA256

    bdabe2bdb1fd5ffcf8d99f12d67bf97748d4c91dd9a43656c17984f392088525

  • SHA512

    86c826fe55f7a542e3bc88eba73aff453167edd96ee5418dfae0758e2e96e16e3b8e56fd09aa55c69851a8dffde74c4c50c16355af34a470973bc247781ef75f

  • SSDEEP

    3072:7f7Zf6dOG+VLg7w+BH31GcNdUYK6vvMAVW:Hl6dYx+BFGcn/sAA

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      bdabe2bdb1fd5ffcf8d99f12d67bf97748d4c91dd9a43656c17984f392088525

    • Size

      127KB

    • MD5

      c44e5004816f80cee5e6e71bac7c63b6

    • SHA1

      a7ca5e713c635e4dff4998d43d4d61c3c4891449

    • SHA256

      bdabe2bdb1fd5ffcf8d99f12d67bf97748d4c91dd9a43656c17984f392088525

    • SHA512

      86c826fe55f7a542e3bc88eba73aff453167edd96ee5418dfae0758e2e96e16e3b8e56fd09aa55c69851a8dffde74c4c50c16355af34a470973bc247781ef75f

    • SSDEEP

      3072:7f7Zf6dOG+VLg7w+BH31GcNdUYK6vvMAVW:Hl6dYx+BFGcn/sAA

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks