Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ca271f5c46...32.exe

windows7-x64

8

ca271f5c46...32.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca271f5c4622b2c518d28e787436ffe2f5df27b8b1b23cb7ed8318ac08233f32

  • Size

    112KB

  • Sample

    221107-wketeaagh6

  • MD5

    0a136a4eb6281d7acdf4a5720dbd5420

  • SHA1

    32017fafde92b2d21572b54c1eff731dfae7b72b

  • SHA256

    ca271f5c4622b2c518d28e787436ffe2f5df27b8b1b23cb7ed8318ac08233f32

  • SHA512

    dcbd2a13ef4ab106bc3d0af026d73d016b2488522202a5ca70f21245964735f07309120529029aaf0c4cf29ab72408cd56652ba223e747cf47caa130cac68d31

  • SSDEEP

    1536:LPqKgbwDeVyAUHwGvVJrYJeyxWxVhkITI5ywWFfB8lBTxe5P1PS:9gbwDKyLwGvTrYkg6BJR6ns5PFS

Score
8/10

Malware Config

Targets

    • Target

      ca271f5c4622b2c518d28e787436ffe2f5df27b8b1b23cb7ed8318ac08233f32

    • Size

      112KB

    • MD5

      0a136a4eb6281d7acdf4a5720dbd5420

    • SHA1

      32017fafde92b2d21572b54c1eff731dfae7b72b

    • SHA256

      ca271f5c4622b2c518d28e787436ffe2f5df27b8b1b23cb7ed8318ac08233f32

    • SHA512

      dcbd2a13ef4ab106bc3d0af026d73d016b2488522202a5ca70f21245964735f07309120529029aaf0c4cf29ab72408cd56652ba223e747cf47caa130cac68d31

    • SSDEEP

      1536:LPqKgbwDeVyAUHwGvVJrYJeyxWxVhkITI5ywWFfB8lBTxe5P1PS:9gbwDKyLwGvTrYkg6BJR6ns5PFS

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks