Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

2014_11vod...45.exe

windows7-x64

7

2014_11vod...45.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87cd23d239507153d9684534aee2a359936c6432aeebe96b6d370016639739c2

  • Size

    127KB

  • Sample

    221124-ff72dsac33

  • MD5

    8c24b64878d2b338d7e8693aa7ac98e8

  • SHA1

    346c3f6d9372bfd46a72af9a2b3ebbcd8640fdd2

  • SHA256

    87cd23d239507153d9684534aee2a359936c6432aeebe96b6d370016639739c2

  • SHA512

    e669e8d075fdc1b0eb2f0a377af5fc6b3a6ea5c39bdb04f87bdbce54cd55967a59362d4ad0b859c773c249e354a7fd8ea6992a5f5f228a071cb4765cff1e0363

  • SSDEEP

    3072:QzireMNALp+CSYnzyHyvBwwQlF9KwrrzFmwzDqrRIo:QzeeMspaYzyHeBzQJPrrpHKrKo

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11vodafone_onlinerechnung_002120003909_november_390321980009_11_00000000445.exe

    • Size

      176KB

    • MD5

      0bdbb242c3d65c99b0c4b3bdad19a793

    • SHA1

      1b2a37b64b1a7ca71b801125faca273408bb7e67

    • SHA256

      942b643d07c0cb4ac1593dccd846fe4bcda402f5f74fa4ba1437248e7c89e0c3

    • SHA512

      387c6455dc286989d0de8b418505b5453ce82c262132eba2975006b59057a698bb5fe33bfa428690d0db30b3396ba6b699a1ad2b68482bc04df27975ca19206e

    • SSDEEP

      3072:bBfHcmI+fMEJRvGGs4Edlb9kMv0UNLp+CSYnzyZyvBwwQlF9KwrrznF19AaROhze:blH80NJ5ZEdT8UlpaYzyZeBzQJPrrjFt

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks