Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2c04b75e1f...6e.exe

windows7-x64

10

2c04b75e1f...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c04b75e1fcfb842f20574e9f9b8b80d0fcae70bb372325e348cf1df4a3ff26e

  • Size

    528KB

  • Sample

    221030-qk773acca7

  • MD5

    93f551b18c9722e5739e98701e8f6d12

  • SHA1

    365702038b528be0497c9b12ce2fdbdb59d245b2

  • SHA256

    2c04b75e1fcfb842f20574e9f9b8b80d0fcae70bb372325e348cf1df4a3ff26e

  • SHA512

    65c8a68042caf06e43f775799c25493bbefa789b2de3c68baac911c74afcfc037c31e0b7b58b448d6dc5baf2e9d5435cb773b57ba41fc76ff3be93dbc8544c25

  • SSDEEP

    12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUk:Ak0bNs9FtyeI+k

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2c04b75e1fcfb842f20574e9f9b8b80d0fcae70bb372325e348cf1df4a3ff26e

    • Size

      528KB

    • MD5

      93f551b18c9722e5739e98701e8f6d12

    • SHA1

      365702038b528be0497c9b12ce2fdbdb59d245b2

    • SHA256

      2c04b75e1fcfb842f20574e9f9b8b80d0fcae70bb372325e348cf1df4a3ff26e

    • SHA512

      65c8a68042caf06e43f775799c25493bbefa789b2de3c68baac911c74afcfc037c31e0b7b58b448d6dc5baf2e9d5435cb773b57ba41fc76ff3be93dbc8544c25

    • SSDEEP

      12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUk:Ak0bNs9FtyeI+k

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks