Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

a93ba778e4...38.exe

windows7-x64

8

a93ba778e4...38.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a93ba778e42c95efaaa57a5a571e151d56118d930d855de588f1961604975f38

  • Size

    585KB

  • Sample

    221107-gdl7ksdcdp

  • MD5

    20431fc7cdc2c3a3861e429c79eeb8fd

  • SHA1

    b524121a14e6b174de3de872d2133fc8997ea437

  • SHA256

    a93ba778e42c95efaaa57a5a571e151d56118d930d855de588f1961604975f38

  • SHA512

    bdf1a9b080309b2255f5d78f26be51c8e6b790980fc5e5193465e13b58545bfe586481a518f83829a5be1e2127b4b3204bb69d70fa6894edad9f9737aa718428

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjW:r5sJo6YrFUiyAak11LtjW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a93ba778e42c95efaaa57a5a571e151d56118d930d855de588f1961604975f38

    • Size

      585KB

    • MD5

      20431fc7cdc2c3a3861e429c79eeb8fd

    • SHA1

      b524121a14e6b174de3de872d2133fc8997ea437

    • SHA256

      a93ba778e42c95efaaa57a5a571e151d56118d930d855de588f1961604975f38

    • SHA512

      bdf1a9b080309b2255f5d78f26be51c8e6b790980fc5e5193465e13b58545bfe586481a518f83829a5be1e2127b4b3204bb69d70fa6894edad9f9737aa718428

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjW:r5sJo6YrFUiyAak11LtjW

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks