Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

a65b2ea41d...ff.exe

windows7-x64

8

a65b2ea41d...ff.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a65b2ea41d7753aaa5c6f105a54a59a985dafabc142a8f52cce7466123b02cff

  • Size

    137KB

  • Sample

    221019-1xnz3aade3

  • MD5

    91e66d1b95b3a5fe0a2d1b24a6954360

  • SHA1

    efd5948f2f0e6150a95977a6b4b77b26f7c81a14

  • SHA256

    a65b2ea41d7753aaa5c6f105a54a59a985dafabc142a8f52cce7466123b02cff

  • SHA512

    3731cf177145becd34536d06fe242b1f7cd8fb557d0a1b0a7527eec5eff7db435e13f263f3e15692f4bd0bf976e232f0630f7f50387e54fb940da523122998db

  • SSDEEP

    3072:HKIx3w835x4UrstfBS1xgMhx/Mb6H1f51HUL8HVClTsdVKILrzcVlfnJGlYy/:HFQUeJID86HNLmTsdYILIRJGlY

Score
8/10
persistence

Malware Config

Targets

    • Target

      a65b2ea41d7753aaa5c6f105a54a59a985dafabc142a8f52cce7466123b02cff

    • Size

      137KB

    • MD5

      91e66d1b95b3a5fe0a2d1b24a6954360

    • SHA1

      efd5948f2f0e6150a95977a6b4b77b26f7c81a14

    • SHA256

      a65b2ea41d7753aaa5c6f105a54a59a985dafabc142a8f52cce7466123b02cff

    • SHA512

      3731cf177145becd34536d06fe242b1f7cd8fb557d0a1b0a7527eec5eff7db435e13f263f3e15692f4bd0bf976e232f0630f7f50387e54fb940da523122998db

    • SSDEEP

      3072:HKIx3w835x4UrstfBS1xgMhx/Mb6H1f51HUL8HVClTsdVKILrzcVlfnJGlYy/:HFQUeJID86HNLmTsdYILIRJGlY

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks