Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1f831416e7...2e.exe

windows7-x64

8

1f831416e7...2e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f831416e7d5ffa7bcb5b42114cb6f8a6ec56ac86f0b70cd969936c8ddc67b2e

  • Size

    1.2MB

  • Sample

    221107-ymsjdsfah4

  • MD5

    0b2e478bd05ef972ad1a1c179bc1ffa9

  • SHA1

    97ac1fce83af0f073c1a60fe9732504527c0aa42

  • SHA256

    1f831416e7d5ffa7bcb5b42114cb6f8a6ec56ac86f0b70cd969936c8ddc67b2e

  • SHA512

    b1785aa9c5b31db8cfeab267464fb10b4ec367bcee5a1a338296a2ab916682f1be89347f515bf0b55969bf5af3230149e2b531221eceeb12ad77a92f70c41739

  • SSDEEP

    12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzbblcII3krH4nvQD+:TbgrMz8R25UPQPdXlcII3vvL

Score
8/10
persistence

Malware Config

Targets

    • Target

      1f831416e7d5ffa7bcb5b42114cb6f8a6ec56ac86f0b70cd969936c8ddc67b2e

    • Size

      1.2MB

    • MD5

      0b2e478bd05ef972ad1a1c179bc1ffa9

    • SHA1

      97ac1fce83af0f073c1a60fe9732504527c0aa42

    • SHA256

      1f831416e7d5ffa7bcb5b42114cb6f8a6ec56ac86f0b70cd969936c8ddc67b2e

    • SHA512

      b1785aa9c5b31db8cfeab267464fb10b4ec367bcee5a1a338296a2ab916682f1be89347f515bf0b55969bf5af3230149e2b531221eceeb12ad77a92f70c41739

    • SSDEEP

      12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzbblcII3krH4nvQD+:TbgrMz8R25UPQPdXlcII3vvL

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks