Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

fdf4f691c6...bb.exe

windows7-x64

10

fdf4f691c6...bb.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdf4f691c6d631257d4c770206de34d9e7730c99934a53e25fa8169cda3309bb

  • Size

    81KB

  • Sample

    221003-p8hrmsgch4

  • MD5

    42ac5ae5361fd345f42521c3645cadc0

  • SHA1

    14453d9c40913daeda0373c37f9d3e4410d8c9b1

  • SHA256

    fdf4f691c6d631257d4c770206de34d9e7730c99934a53e25fa8169cda3309bb

  • SHA512

    64d32c23638ae25ea5b8d778628a83c25ce10d14ced93869eb4cd2a3640d2b7a0cc4535841910ddd007def31182a2461d1e0e2e8f5b509d4587153c96ab175be

  • SSDEEP

    1536:HzMbmB6BnyuO6zAuo/IXEN1bn0w5z9jug8FKMfgY:HzMbmcJOuCIXt88dgY

Score
10/10
persistence

Malware Config

Targets

    • Target

      fdf4f691c6d631257d4c770206de34d9e7730c99934a53e25fa8169cda3309bb

    • Size

      81KB

    • MD5

      42ac5ae5361fd345f42521c3645cadc0

    • SHA1

      14453d9c40913daeda0373c37f9d3e4410d8c9b1

    • SHA256

      fdf4f691c6d631257d4c770206de34d9e7730c99934a53e25fa8169cda3309bb

    • SHA512

      64d32c23638ae25ea5b8d778628a83c25ce10d14ced93869eb4cd2a3640d2b7a0cc4535841910ddd007def31182a2461d1e0e2e8f5b509d4587153c96ab175be

    • SSDEEP

      1536:HzMbmB6BnyuO6zAuo/IXEN1bn0w5z9jug8FKMfgY:HzMbmcJOuCIXt88dgY

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks