Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

c15176343e...c0.exe

windows7-x64

8

c15176343e...c0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c15176343ed7377da190b57d2336b37dd7afff427c1b82a33393c38e255247c0

  • Size

    152KB

  • Sample

    221029-3xgxvsdagj

  • MD5

    93eea248e005c2710c46a514cd81b736

  • SHA1

    0d4cdb6988a4895213045a760ddd0e9d9279ef2c

  • SHA256

    c15176343ed7377da190b57d2336b37dd7afff427c1b82a33393c38e255247c0

  • SHA512

    2517a58a5484c6a0a5af57354d1be79b66e57ba518b7d05090395d3f59fd65fdeb0d7470eadad61ec82dfd71d46151948c5469d0f538de55591f6b83cc3db863

  • SSDEEP

    3072:t5gFJ520XP84d6sGh+qo9CNNsPi391VzIxnY56zF/QDI:toJ5hPBu0qcCNG637VOYy

Score
8/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      c15176343ed7377da190b57d2336b37dd7afff427c1b82a33393c38e255247c0

    • Size

      152KB

    • MD5

      93eea248e005c2710c46a514cd81b736

    • SHA1

      0d4cdb6988a4895213045a760ddd0e9d9279ef2c

    • SHA256

      c15176343ed7377da190b57d2336b37dd7afff427c1b82a33393c38e255247c0

    • SHA512

      2517a58a5484c6a0a5af57354d1be79b66e57ba518b7d05090395d3f59fd65fdeb0d7470eadad61ec82dfd71d46151948c5469d0f538de55591f6b83cc3db863

    • SSDEEP

      3072:t5gFJ520XP84d6sGh+qo9CNNsPi391VzIxnY56zF/QDI:toJ5hPBu0qcCNG637VOYy

    Score
    8/10
    evasionpersistencetrojanupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks