Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

aac38fb090...f6.exe

windows7-x64

10

aac38fb090...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aac38fb090a0e9945e163964945d2a608964d8787fe0c7210d2e8372df9e08f6

  • Size

    962KB

  • Sample

    221021-gasvysebb4

  • MD5

    561d235ed7182537a1b1226f7a9c8ee0

  • SHA1

    2158309146b69f70f74fe2360e08821f49d0ff48

  • SHA256

    aac38fb090a0e9945e163964945d2a608964d8787fe0c7210d2e8372df9e08f6

  • SHA512

    e8f560fd2237d0e687602b16a851634a0f1c9af38084386721a46ae16e69c40d241b7ab1bb1e00fe2b42bf747bdb35e654b1608a64746f61ebd9b1b7e4b8577b

  • SSDEEP

    12288:wX/eOyaiqw85xzOa2qfsn/w+zGBvZ4qdxeDftkAshsd8/6:wX/eO4qw8POo0/w+zGBvZfIftkLwd

Score
10/10
persistence

Malware Config

Targets

    • Target

      aac38fb090a0e9945e163964945d2a608964d8787fe0c7210d2e8372df9e08f6

    • Size

      962KB

    • MD5

      561d235ed7182537a1b1226f7a9c8ee0

    • SHA1

      2158309146b69f70f74fe2360e08821f49d0ff48

    • SHA256

      aac38fb090a0e9945e163964945d2a608964d8787fe0c7210d2e8372df9e08f6

    • SHA512

      e8f560fd2237d0e687602b16a851634a0f1c9af38084386721a46ae16e69c40d241b7ab1bb1e00fe2b42bf747bdb35e654b1608a64746f61ebd9b1b7e4b8577b

    • SSDEEP

      12288:wX/eOyaiqw85xzOa2qfsn/w+zGBvZ4qdxeDftkAshsd8/6:wX/eO4qw8POo0/w+zGBvZfIftkLwd

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks