Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

f8aa76b125...44.exe

windows7-x64

8

f8aa76b125...44.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8aa76b12547939ab3ad2b1be17a97c6527e9837a0e46865262f1ba2d2078f44

  • Size

    298KB

  • Sample

    221019-qdmyjshag3

  • MD5

    a1ba185fe310d9ac9f51abbd3319f9c0

  • SHA1

    dea8ca3e7ac3a201fcc4702e6ba8b68aefd086a1

  • SHA256

    f8aa76b12547939ab3ad2b1be17a97c6527e9837a0e46865262f1ba2d2078f44

  • SHA512

    7a714be032389fce593c842ce126cdc104a367c4299d95e0c652faf3c3d04b7e8858db033b4bae1324193288fb662a583f43a7abce4a986c7b9c97837894bdb0

  • SSDEEP

    6144:tn6XzoCb5sry2SzUznompQjcRETHSBON8:t2sm2SAM1zzSBON8

Score
8/10
persistence

Malware Config

Targets

    • Target

      f8aa76b12547939ab3ad2b1be17a97c6527e9837a0e46865262f1ba2d2078f44

    • Size

      298KB

    • MD5

      a1ba185fe310d9ac9f51abbd3319f9c0

    • SHA1

      dea8ca3e7ac3a201fcc4702e6ba8b68aefd086a1

    • SHA256

      f8aa76b12547939ab3ad2b1be17a97c6527e9837a0e46865262f1ba2d2078f44

    • SHA512

      7a714be032389fce593c842ce126cdc104a367c4299d95e0c652faf3c3d04b7e8858db033b4bae1324193288fb662a583f43a7abce4a986c7b9c97837894bdb0

    • SSDEEP

      6144:tn6XzoCb5sry2SzUznompQjcRETHSBON8:t2sm2SAM1zzSBON8

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks