Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

17802b7ea0...41.exe

windows7-x64

8

17802b7ea0...41.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17802b7ea044164f5f89d89ab8c7afd5c3a7a92373dc538688945e6f8e39a641

  • Size

    278KB

  • Sample

    221128-d6j15sga5x

  • MD5

    d0967914b98789b8c5a033e2e6a9a1f8

  • SHA1

    bd6226241265548bacac3a288e654a2b52acf31b

  • SHA256

    17802b7ea044164f5f89d89ab8c7afd5c3a7a92373dc538688945e6f8e39a641

  • SHA512

    e97a9ea92864bc9cc9795b665a13be3862916a786de316801759c26ad85c78d3d053b8b7c3bfec201039f474d0471873cd6a11e3dd074fa35734951eb3d3db50

  • SSDEEP

    6144:dQDds6bxOU8ytpJP/+HFLNSFpEBax8CqRZ:SDG6b98yJYNJax8Cq

Score
8/10
persistence

Malware Config

Targets

    • Target

      17802b7ea044164f5f89d89ab8c7afd5c3a7a92373dc538688945e6f8e39a641

    • Size

      278KB

    • MD5

      d0967914b98789b8c5a033e2e6a9a1f8

    • SHA1

      bd6226241265548bacac3a288e654a2b52acf31b

    • SHA256

      17802b7ea044164f5f89d89ab8c7afd5c3a7a92373dc538688945e6f8e39a641

    • SHA512

      e97a9ea92864bc9cc9795b665a13be3862916a786de316801759c26ad85c78d3d053b8b7c3bfec201039f474d0471873cd6a11e3dd074fa35734951eb3d3db50

    • SSDEEP

      6144:dQDds6bxOU8ytpJP/+HFLNSFpEBax8CqRZ:SDG6b98yJYNJax8Cq

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks