Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

a250e5c015...3b.exe

windows7-x64

8

a250e5c015...3b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b

  • Size

    300KB

  • Sample

    221019-1y2mjsaea7

  • MD5

    a20120062a1ddb5abf58c674ad023660

  • SHA1

    33c042aaf21b64229a3ee8fa00390f96c67a9714

  • SHA256

    a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b

  • SHA512

    539a89f245ceb6ec9cfc520fd0d982cc3f25c61f3862013e112d3d98bfa5cc7ad1334672ca2ce329c3a08d1b8662ab2a6a4a8f58c75285602408f7c63a2e55cb

  • SSDEEP

    6144:UlSWnu93+NLuC6vKljOuf+DrIhoG5L/hztBOMygTikuu:AGq6vKQDEi6J9

Score
8/10
persistence

Malware Config

Targets

    • Target

      a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b

    • Size

      300KB

    • MD5

      a20120062a1ddb5abf58c674ad023660

    • SHA1

      33c042aaf21b64229a3ee8fa00390f96c67a9714

    • SHA256

      a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b

    • SHA512

      539a89f245ceb6ec9cfc520fd0d982cc3f25c61f3862013e112d3d98bfa5cc7ad1334672ca2ce329c3a08d1b8662ab2a6a4a8f58c75285602408f7c63a2e55cb

    • SSDEEP

      6144:UlSWnu93+NLuC6vKljOuf+DrIhoG5L/hztBOMygTikuu:AGq6vKQDEi6J9

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks