Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b5118f38b4...8d.exe

windows7-x64

8

b5118f38b4...8d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5118f38b44f76f25a0476c094ab7ade97a150c6df811fd5762542729c216c8d

  • Size

    296KB

  • Sample

    221123-ykakssdc6y

  • MD5

    4bc4eeeada11c489e88c4d7cc6291400

  • SHA1

    0b5d4b0ad6b9c73bca5684f0dff9650d89656f85

  • SHA256

    b5118f38b44f76f25a0476c094ab7ade97a150c6df811fd5762542729c216c8d

  • SHA512

    3803f870a58eaf939e7e877912fbe56230532146d56ff17e70b393d4fe55a014d872145bd60fad9f01eac89eb584ba6fff8b917da57d08c4c8594da537a5fea7

  • SSDEEP

    6144:oVsTXF+yaNRUGjcbVkNUS5TEV2XnUfX501kCAgcw3t/EGQhbQaDOlXG7T:zTXF+dRUJGHxEVOr1kCAgcwF1gKo7T

Score
8/10
persistence

Malware Config

Targets

    • Target

      b5118f38b44f76f25a0476c094ab7ade97a150c6df811fd5762542729c216c8d

    • Size

      296KB

    • MD5

      4bc4eeeada11c489e88c4d7cc6291400

    • SHA1

      0b5d4b0ad6b9c73bca5684f0dff9650d89656f85

    • SHA256

      b5118f38b44f76f25a0476c094ab7ade97a150c6df811fd5762542729c216c8d

    • SHA512

      3803f870a58eaf939e7e877912fbe56230532146d56ff17e70b393d4fe55a014d872145bd60fad9f01eac89eb584ba6fff8b917da57d08c4c8594da537a5fea7

    • SSDEEP

      6144:oVsTXF+yaNRUGjcbVkNUS5TEV2XnUfX501kCAgcw3t/EGQhbQaDOlXG7T:zTXF+dRUJGHxEVOr1kCAgcwF1gKo7T

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks