Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Anwaltscha...bH.exe

windows7-x64

8

Anwaltscha...bH.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99b1a562b2c3401866f1457cc680dba8143a1103d3daa38ad8644017d9590b7f

  • Size

    108KB

  • Sample

    221001-3vkkzaceb6

  • MD5

    50d70427d920b4c38fd215109da2610e

  • SHA1

    fead64a7da59929e022d61111c4ef1c19b2d0082

  • SHA256

    99b1a562b2c3401866f1457cc680dba8143a1103d3daa38ad8644017d9590b7f

  • SHA512

    ce3f9632893ca8208163433fa9f3b3e0850f03378b6112eac3921850d48586ed7ead6dec06c89e4351264e51b767842a978beeaa6ef334d70447298b68812bee

  • SSDEEP

    1536:9brsQF67YR4+mwLcxscchhvHslMgcXAMSw9YrRPxFZCIXYyOjxmixwD5qogxkfpe:ZekR4+Lws3yMJwMS/pCjXx/oQ2e

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      Anwaltschaft Kostenrechnung fur Kaufmann Alexander 25.06.2013 Conrad Online GmbH.com

    • Size

      108KB

    • MD5

      71e0f78dcd1cce7228fe59c84a747f5b

    • SHA1

      e8766e450ea32561ddb8e3345ef874747c027f38

    • SHA256

      77fb921aa011f3049c6bebbff4dbedf6382bd61db9b4960c998525eed3ae0df7

    • SHA512

      a13fa7c569581c1d1009418fa359ea23d1a9295e080e6c8de7c2135a1c8b44ced15fe6f4bcf21f951fe1d9ed6d483cca919d4fc5f7b480e7991cc185eac2c0b5

    • SSDEEP

      1536:gbrsQF67YR4+mwLcxscchhvHslMgcXAMSw9YrRPxFZCIXYyOjxmixwD5qogxkfpm:eekR4+Lws3yMJwMS/pCjXx/oQ2m

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks