Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

814e040dcb...aa.exe

windows7-x64

8

814e040dcb...aa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    814e040dcbab569dc28c6ddba6844eeab9926b97c8dc9fa288b4a568557fdeaa

  • Size

    124KB

  • Sample

    221029-ca8h7agdhl

  • MD5

    006154ef212096ad03b12685136c4c50

  • SHA1

    1b0bcc26c9868c8679402cbc87b5d26d90e7ce32

  • SHA256

    814e040dcbab569dc28c6ddba6844eeab9926b97c8dc9fa288b4a568557fdeaa

  • SHA512

    5ee6529c7878b84940a87f3a021f9dc275ec1369d923842fbbd4137c4b69fd18e9644a8b875add22d6c6def5107b540ebc82f14d35458174b5c05a13798d41f4

  • SSDEEP

    1536:mvy50tV44aqwoa9ujdbNyVXa1lgNdaOCt1kTW4:mtWZqwoa9Xa1Idart194

Score
8/10
persistence

Malware Config

Targets

    • Target

      814e040dcbab569dc28c6ddba6844eeab9926b97c8dc9fa288b4a568557fdeaa

    • Size

      124KB

    • MD5

      006154ef212096ad03b12685136c4c50

    • SHA1

      1b0bcc26c9868c8679402cbc87b5d26d90e7ce32

    • SHA256

      814e040dcbab569dc28c6ddba6844eeab9926b97c8dc9fa288b4a568557fdeaa

    • SHA512

      5ee6529c7878b84940a87f3a021f9dc275ec1369d923842fbbd4137c4b69fd18e9644a8b875add22d6c6def5107b540ebc82f14d35458174b5c05a13798d41f4

    • SSDEEP

      1536:mvy50tV44aqwoa9ujdbNyVXa1lgNdaOCt1kTW4:mtWZqwoa9Xa1Idart194

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks