Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

de33cf5d25...bc.exe

windows7-x64

10

de33cf5d25...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de33cf5d2517f1a2e95537401bdf60ddeb5eb189ff31c50a9dc1b495e2b7f1bc

  • Size

    528KB

  • Sample

    221002-n75pcaffbq

  • MD5

    492cca7d81f7451f5bb9d6b2310e6c33

  • SHA1

    b88a5782a2e79014e5b00a4b68718a5e6f5143af

  • SHA256

    de33cf5d2517f1a2e95537401bdf60ddeb5eb189ff31c50a9dc1b495e2b7f1bc

  • SHA512

    29490a39cab0e9ca6c84275479022deff0463136f53917886fb7d79107b6d680fa7d2eabdcc0ca1cc5bb19c085c4fe8db5f5f461533188c0b73e662652afdb2a

  • SSDEEP

    12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUq:Ak0bNs9FtyeI+q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      de33cf5d2517f1a2e95537401bdf60ddeb5eb189ff31c50a9dc1b495e2b7f1bc

    • Size

      528KB

    • MD5

      492cca7d81f7451f5bb9d6b2310e6c33

    • SHA1

      b88a5782a2e79014e5b00a4b68718a5e6f5143af

    • SHA256

      de33cf5d2517f1a2e95537401bdf60ddeb5eb189ff31c50a9dc1b495e2b7f1bc

    • SHA512

      29490a39cab0e9ca6c84275479022deff0463136f53917886fb7d79107b6d680fa7d2eabdcc0ca1cc5bb19c085c4fe8db5f5f461533188c0b73e662652afdb2a

    • SSDEEP

      12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUq:Ak0bNs9FtyeI+q

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks