Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

89db71a578...d9.exe

windows7-x64

8

89db71a578...d9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89db71a57803f508953c6b95fe74daf698bd9d63ab52c1de438db7252fd2a9d9

  • Size

    330KB

  • Sample

    221107-n2h86aede4

  • MD5

    074b01e83285b20eafc271a3d1fed283

  • SHA1

    b410b0733e6d9adcbf14bcb009235d05465f97ac

  • SHA256

    89db71a57803f508953c6b95fe74daf698bd9d63ab52c1de438db7252fd2a9d9

  • SHA512

    8cde8e4e7d87367e9df729f3dc662e947cd86b7dfd896d0c4bbccfe25b5bd07ddeee767966673274f43581127c32fa65c6ca07f8b2f17a78255a9fe9c04925a9

  • SSDEEP

    6144:wU1tnxKApiXZcKgGEoi9P7DGXfszPxuRiIdn+:Xtn4A2+KjEL9z6cPxqiC

Score
8/10
persistence

Malware Config

Targets

    • Target

      89db71a57803f508953c6b95fe74daf698bd9d63ab52c1de438db7252fd2a9d9

    • Size

      330KB

    • MD5

      074b01e83285b20eafc271a3d1fed283

    • SHA1

      b410b0733e6d9adcbf14bcb009235d05465f97ac

    • SHA256

      89db71a57803f508953c6b95fe74daf698bd9d63ab52c1de438db7252fd2a9d9

    • SHA512

      8cde8e4e7d87367e9df729f3dc662e947cd86b7dfd896d0c4bbccfe25b5bd07ddeee767966673274f43581127c32fa65c6ca07f8b2f17a78255a9fe9c04925a9

    • SSDEEP

      6144:wU1tnxKApiXZcKgGEoi9P7DGXfszPxuRiIdn+:Xtn4A2+KjEL9z6cPxqiC

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks