ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

ca2938a806...34.exe

windows7-x64

7

ca2938a806...34.exe

windows10-2004-x64

7

Sharing

General

Target

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
Size

1.1MB
Sample

221127-ql3nzaag75
MD5

60c734ada641dbfb93ea83d9ce28f3ac
SHA1

60935152ca71730e3b436efb63bda59c27ea7fd4
SHA256

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
SHA512

daf532a2443eb2e926a3553eade7fc6c9990433f7a5e6930108ecb5be7104ee628c1bfc9d951125718e5128fc14eb26753c04ba7d539612f35d2d4702a6b64c1
SSDEEP

12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4z:LF7WXbqdUTmWK29ZY47EiLMYTHyp

Score

7^/10

Static task

static1

Behavioral task

behavioral1

Sample

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134.exe

Resource

win7-20221111-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
- Size
  
  1.1MB
- MD5
  
  60c734ada641dbfb93ea83d9ce28f3ac
- SHA1
  
  60935152ca71730e3b436efb63bda59c27ea7fd4
- SHA256
  
  ca2938a806801037ccdfcf23403f9073bd7c2d822d3c87f26ee1d1afa36d6134
- SHA512
  
  daf532a2443eb2e926a3553eade7fc6c9990433f7a5e6930108ecb5be7104ee628c1bfc9d951125718e5128fc14eb26753c04ba7d539612f35d2d4702a6b64c1
- SSDEEP
  
  12288:LJ84D/9Hfe6rfTJ6Lt8urB7Nj6fsfqdm7pTTCIu0EuG2a18RzY47E9ELluv9Ny4z:LF7WXbqdUTmWK29ZY47EiLMYTHyp
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.