Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

extracted_at_0x0.exe

windows7-x64

7

extracted_at_0x0.exe

windows10-2004-x64

10

Resubmissions

23/09/2022, 14:23

220923-rqmnzsaedq 10

23/09/2022, 14:02

220923-rb3rnaadhq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    extracted_at_0x0.exe.zip

  • Size

    338KB

  • Sample

    220923-rb3rnaadhq

  • MD5

    7d3a374530eca69928f7ecb004b261de

  • SHA1

    641e6186958df82256d6b08672145a02386a5530

  • SHA256

    f97e7763f53610fb7915fa5ee7d0fd649749281f6ea3c6774d044c641cc32a86

  • SHA512

    222a12a540aabb80d5e5eb0c116952b6dcb844c3e1d855fcd96fdc0093d329b7d3ddcf987f4f1e594dcabfebe56eb51caac43d0482ee5f8810d7114db8feea24

  • SSDEEP

    6144:NH++174+frkj3qNyMa3cbOr0HZh7NEr67w8UsmRv3StGoj7LK6HsFR04GiGNV4/y:NH++1U+fgXro0OwImRv0fLKbR04G3V4K

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      extracted_at_0x0.exe.bin

    • Size

      474KB

    • MD5

      cbd03b0128ec974c983c0604d4319536

    • SHA1

      19bd4374de4f58df2a303a68a22df8ffd23a51b8

    • SHA256

      0d49d91ede6737be9e75bac99701a344b3a8a32acaf95e452a8888521481e15d

    • SHA512

      ee4970768b92c24adae33c1b0c3cf9e4957d3c6d52c1915caa95cb4fca5e566965d024bf4856ed90c531b5550ba49d2d91eea87eca45e7cb0f6dbb9e2ddb3914

    • SSDEEP

      6144:ZtXZXzWCOd3DgW86qeVRvnx051WPKOV1mDVa1rqWvzN1R4Uz4JSvkxYTpPnc/vfh:ZtZ4z60DxK1WSEUa1rJ1+c44JnW9f

    Score
    10/10
    discoveryguloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks