Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

2014_11rec...74.exe

windows7-x64

7

2014_11rec...74.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    929211c8bd92d176ed59aa507a917acfb4990e5e282f36e7dce3c4f1bcc44ebe

  • Size

    126KB

  • Sample

    221125-wh26xsge71

  • MD5

    5f80b7d91a6f0e41d122d96f554c3f51

  • SHA1

    a5c0e084a2bcd668e9bce7c41669f66a400a0806

  • SHA256

    929211c8bd92d176ed59aa507a917acfb4990e5e282f36e7dce3c4f1bcc44ebe

  • SHA512

    7083017f67e75013525b4254267ca11cb7b4e5f5d2b5da7767b9ab2a23dfaea5d8dcfc794260ee96a05dbec49d49c69ab2e680b3dd025050f782498143daf654

  • SSDEEP

    1536:ApLVtBMQpJuLjOm82BKgcvigxpw4Wtu2kncFoyllj/JutK13AwpQSVzMJOAVHFx+:AzQ1w2u2AcWIT08wwOSVQJOC9ueXPI

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe

    • Size

      160KB

    • MD5

      4320fecf4c53849d9333b3a60bb80736

    • SHA1

      1b076c59621ca6ef11f03c83a9d5ed8f9e15fa95

    • SHA256

      98158c998d706cf68b702ad7cf03fb5b2e80fb8fbcd3b760ba64e8b19500157b

    • SHA512

      14f54cd7f06403c510916dca7dc130665bdda948316e0084625825222819a5530465e3938fc38d5d4d3894a21b90d088d7d7aafbf347a37d1a069390861b6e6f

    • SSDEEP

      3072:J7tIqiClx3wYLyscpNvw2ugAcWIT08wwOSVOWbCh7v:5tImlx3wYLyj7vwpsh0ZiWD

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks