Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

0c01a66786...35.exe

windows7-x64

8

0c01a66786...35.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c01a667864e3d3a4919906135f628e1b67ef2fddb5b1f4ef75a9400139a6135

  • Size

    296KB

  • Sample

    221030-qvf7bscfb9

  • MD5

    932ef2674fb6aab6a96746d9a47e6c50

  • SHA1

    13696b398d5830ffe95334c9bca10eee1624e83b

  • SHA256

    0c01a667864e3d3a4919906135f628e1b67ef2fddb5b1f4ef75a9400139a6135

  • SHA512

    9bcb6a92127cc0eba6ce6a65fb07efa51668a88579a9cf9b5da705687a6f24add1876b5ce93cdde4118d7d672c43b8449eed1441447636b518eb0509ddf85ec0

  • SSDEEP

    6144:k6uSdqQDynGRXeoGVuO4UG4aKYw//AjYqMAkDxb0Q0LQ1m:keDyOXzldUG4aKYIojzM9Jx8

Score
8/10
persistence

Malware Config

Targets

    • Target

      0c01a667864e3d3a4919906135f628e1b67ef2fddb5b1f4ef75a9400139a6135

    • Size

      296KB

    • MD5

      932ef2674fb6aab6a96746d9a47e6c50

    • SHA1

      13696b398d5830ffe95334c9bca10eee1624e83b

    • SHA256

      0c01a667864e3d3a4919906135f628e1b67ef2fddb5b1f4ef75a9400139a6135

    • SHA512

      9bcb6a92127cc0eba6ce6a65fb07efa51668a88579a9cf9b5da705687a6f24add1876b5ce93cdde4118d7d672c43b8449eed1441447636b518eb0509ddf85ec0

    • SSDEEP

      6144:k6uSdqQDynGRXeoGVuO4UG4aKYw//AjYqMAkDxb0Q0LQ1m:keDyOXzldUG4aKYIojzM9Jx8

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks