Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8d31cac0e9...c7.exe

windows7-x64

8

8d31cac0e9...c7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d31cac0e934cefc7992a33b3e978ea47e45d1c20544476f67a61dde9dc258c7

  • Size

    355KB

  • Sample

    221106-j26l8sdfdn

  • MD5

    11f552e658b00d4a05a2881c1ae83b81

  • SHA1

    e191e0c6839d6655ea3da377a70638f4e69d7490

  • SHA256

    8d31cac0e934cefc7992a33b3e978ea47e45d1c20544476f67a61dde9dc258c7

  • SHA512

    ccb6283fcc4db118478911b82cf48cfe75e13f46c265953992510ac0b04ddebc5b4cb094e9aed08a8d03a02c40c95de97cdbec296b8917ee60058fa0baaa8c4b

  • SSDEEP

    6144:5kH1CNBlRqTDxpUMgZZjUytUTNotV//0C2F/RZ5sG82zp2LhfbMXifzPIPDAZ:NvlRqTDxpUMgnjIytF//2F/RZ5820Ltr

Score
8/10
persistence

Malware Config

Targets

    • Target

      8d31cac0e934cefc7992a33b3e978ea47e45d1c20544476f67a61dde9dc258c7

    • Size

      355KB

    • MD5

      11f552e658b00d4a05a2881c1ae83b81

    • SHA1

      e191e0c6839d6655ea3da377a70638f4e69d7490

    • SHA256

      8d31cac0e934cefc7992a33b3e978ea47e45d1c20544476f67a61dde9dc258c7

    • SHA512

      ccb6283fcc4db118478911b82cf48cfe75e13f46c265953992510ac0b04ddebc5b4cb094e9aed08a8d03a02c40c95de97cdbec296b8917ee60058fa0baaa8c4b

    • SSDEEP

      6144:5kH1CNBlRqTDxpUMgZZjUytUTNotV//0C2F/RZ5sG82zp2LhfbMXifzPIPDAZ:NvlRqTDxpUMgnjIytF//2F/RZ5820Ltr

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks