Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8887b8d605...ca.exe

windows7-x64

10

8887b8d605...ca.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8887b8d605199246e89e5a7b7c4096c8d25730504fc3d1054962aa7f2e9363ca

  • Size

    80KB

  • Sample

    221030-t5balsbccn

  • MD5

    822dacc7534b8389dca55cb52df3abb0

  • SHA1

    7c787f2147ad58e810e24ec900e87750c6c4b873

  • SHA256

    8887b8d605199246e89e5a7b7c4096c8d25730504fc3d1054962aa7f2e9363ca

  • SHA512

    0e33264a9e14b129be9a38cf52be8ba19c5e78b6ea1d107761f66fd32257aec9a7af7c2efb7b77dd56b11e5b94c26f752db3827078da7f9bd7791539dcf28277

  • SSDEEP

    1536:aI0vo8+wBW7w+NlRSab43E0ZS9skC7lu5L/Odgc9zW:cvok+vMab4joskQuhOWe

Score
10/10
persistence

Malware Config

Targets

    • Target

      8887b8d605199246e89e5a7b7c4096c8d25730504fc3d1054962aa7f2e9363ca

    • Size

      80KB

    • MD5

      822dacc7534b8389dca55cb52df3abb0

    • SHA1

      7c787f2147ad58e810e24ec900e87750c6c4b873

    • SHA256

      8887b8d605199246e89e5a7b7c4096c8d25730504fc3d1054962aa7f2e9363ca

    • SHA512

      0e33264a9e14b129be9a38cf52be8ba19c5e78b6ea1d107761f66fd32257aec9a7af7c2efb7b77dd56b11e5b94c26f752db3827078da7f9bd7791539dcf28277

    • SSDEEP

      1536:aI0vo8+wBW7w+NlRSab43E0ZS9skC7lu5L/Odgc9zW:cvok+vMab4joskQuhOWe

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks