Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

87e8e60f0a...27.exe

windows7-x64

8

87e8e60f0a...27.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87e8e60f0a8039d1abbc5007fc735674eabf9a02cb73997fecd8629ba14d4227

  • Size

    185KB

  • Sample

    221129-gy4mcsfg9s

  • MD5

    44a9cb54256b78f76ac494cee40a9e8b

  • SHA1

    b20dcbe5839ce6df957e9b68c259840d5908a825

  • SHA256

    87e8e60f0a8039d1abbc5007fc735674eabf9a02cb73997fecd8629ba14d4227

  • SHA512

    da0edc275592ada687b2359c972080ff22e210e5588b990f741ab413b8ad07c045558f1d000a192627fc457a0146b1e5009cff0829aa817a953adda5e818783d

  • SSDEEP

    3072:3ar0meAs22kChLmrRvDB1R1hFYetoFspICx9OQp7bXXVKcm0anNtIB3flcTIBr:360db2DChmrVND15pIC9OQp7TIcKNtOf

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      87e8e60f0a8039d1abbc5007fc735674eabf9a02cb73997fecd8629ba14d4227

    • Size

      185KB

    • MD5

      44a9cb54256b78f76ac494cee40a9e8b

    • SHA1

      b20dcbe5839ce6df957e9b68c259840d5908a825

    • SHA256

      87e8e60f0a8039d1abbc5007fc735674eabf9a02cb73997fecd8629ba14d4227

    • SHA512

      da0edc275592ada687b2359c972080ff22e210e5588b990f741ab413b8ad07c045558f1d000a192627fc457a0146b1e5009cff0829aa817a953adda5e818783d

    • SSDEEP

      3072:3ar0meAs22kChLmrRvDB1R1hFYetoFspICx9OQp7bXXVKcm0anNtIB3flcTIBr:360db2DChmrVND15pIC9OQp7TIcKNtOf

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks