Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

140d3515be...8d.exe

windows7-x64

10

140d3515be...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    140d3515bed900148c65634379092668ad0c6d5acefcb64d6d74edd75c04f78d

  • Size

    528KB

  • Sample

    221107-ynezpafbc2

  • MD5

    0d70bf19906f362201b466b40bf5f6a3

  • SHA1

    a9e58fa17a647565d35d7891ef3f1d3ebca46c0b

  • SHA256

    140d3515bed900148c65634379092668ad0c6d5acefcb64d6d74edd75c04f78d

  • SHA512

    053da39d6d48c66d4a24ed69dd2d3562ee87771017fc940f852c8249569df1f0f89ab7a01d5ac130052b522fb068b59a34ef81a3f8b8086000f1d89ebf312bab

  • SSDEEP

    12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUN:Ak0bNs9FtyeI+N

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      140d3515bed900148c65634379092668ad0c6d5acefcb64d6d74edd75c04f78d

    • Size

      528KB

    • MD5

      0d70bf19906f362201b466b40bf5f6a3

    • SHA1

      a9e58fa17a647565d35d7891ef3f1d3ebca46c0b

    • SHA256

      140d3515bed900148c65634379092668ad0c6d5acefcb64d6d74edd75c04f78d

    • SHA512

      053da39d6d48c66d4a24ed69dd2d3562ee87771017fc940f852c8249569df1f0f89ab7a01d5ac130052b522fb068b59a34ef81a3f8b8086000f1d89ebf312bab

    • SSDEEP

      12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoUN:Ak0bNs9FtyeI+N

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks