Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

395f805f8c...5e.exe

windows7-x64

3

395f805f8c...5e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    395f805f8cc65f476c36cf09904f5cdb8b5d24ce9bbdcec087d2688f1bcd705e

  • Size

    240KB

  • Sample

    221011-gb89bsghbj

  • MD5

    19f3855a02621e813a6a15b1797c6047

  • SHA1

    36cda19fa394c6255a2134748ae6b8340451c67a

  • SHA256

    395f805f8cc65f476c36cf09904f5cdb8b5d24ce9bbdcec087d2688f1bcd705e

  • SHA512

    152f7853d9403e4a35d1c8bdf5b572316fd44e57f985b8421a1b32dddc1a75031b42fd7739c4865c6443f1f0fd1b52316b0fb367800f18d3e41c8e63282ecd6c

  • SSDEEP

    3072:bQITRTXJf45CkcwnJG9z0tqdfhDJ0gnlVq4E6KBfAXGdX4Nf7wOpR9AQFvCl6KBE:bHp1kFJ9AdDXlonC9NTw8aQmnNIsu

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      395f805f8cc65f476c36cf09904f5cdb8b5d24ce9bbdcec087d2688f1bcd705e

    • Size

      240KB

    • MD5

      19f3855a02621e813a6a15b1797c6047

    • SHA1

      36cda19fa394c6255a2134748ae6b8340451c67a

    • SHA256

      395f805f8cc65f476c36cf09904f5cdb8b5d24ce9bbdcec087d2688f1bcd705e

    • SHA512

      152f7853d9403e4a35d1c8bdf5b572316fd44e57f985b8421a1b32dddc1a75031b42fd7739c4865c6443f1f0fd1b52316b0fb367800f18d3e41c8e63282ecd6c

    • SSDEEP

      3072:bQITRTXJf45CkcwnJG9z0tqdfhDJ0gnlVq4E6KBfAXGdX4Nf7wOpR9AQFvCl6KBE:bHp1kFJ9AdDXlonC9NTw8aQmnNIsu

    Score
    10/10
    salitybackdoorevasiontrojanupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UAC bypass

      evasiontrojan

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks