Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

676288756c...1f.exe

windows7-x64

8

676288756c...1f.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    676288756c1a55fcac7b8a186f89e9703e9047b50292673023434b1568a14e1f

  • Size

    115KB

  • Sample

    221019-2md8jsbfbk

  • MD5

    91131a37729c1097f118c524e99ac610

  • SHA1

    24b2880934f7b76d52111f8a31c67fcf0fc97741

  • SHA256

    676288756c1a55fcac7b8a186f89e9703e9047b50292673023434b1568a14e1f

  • SHA512

    8cb641859b459aedd7b5992cfeb40890c90c077136f985d81277f683293ccce785b59aa1cf34b18e46ebbab3d56d9ef88863388b665a7bf7d13078e1be76ab13

  • SSDEEP

    3072:BoRBRJRBRRRRRRhRRRRRRRhRRRRpJRRRRRRRRRRRRRRRRRRRRRRRRRRRppRRRRRd:Bo9RpwqosctDY

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      676288756c1a55fcac7b8a186f89e9703e9047b50292673023434b1568a14e1f

    • Size

      115KB

    • MD5

      91131a37729c1097f118c524e99ac610

    • SHA1

      24b2880934f7b76d52111f8a31c67fcf0fc97741

    • SHA256

      676288756c1a55fcac7b8a186f89e9703e9047b50292673023434b1568a14e1f

    • SHA512

      8cb641859b459aedd7b5992cfeb40890c90c077136f985d81277f683293ccce785b59aa1cf34b18e46ebbab3d56d9ef88863388b665a7bf7d13078e1be76ab13

    • SSDEEP

      3072:BoRBRJRBRRRRRRhRRRRRRRhRRRRpJRRRRRRRRRRRRRRRRRRRRRRRRRRRppRRRRRd:Bo9RpwqosctDY

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks