Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9f66c66294...fc.exe

windows7-x64

8

9f66c66294...fc.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f66c66294e99eaaec5a5f879356b78d7a104d30a47b33dfc33ae7d5999c35fc

  • Size

    71KB

  • Sample

    221201-an4faacd6t

  • MD5

    102d682a39cf25cbeb715524b90df960

  • SHA1

    15f0bc341f613e6223ba2483c56f89700bd3a442

  • SHA256

    9f66c66294e99eaaec5a5f879356b78d7a104d30a47b33dfc33ae7d5999c35fc

  • SHA512

    e73e1240b598b84b2f18e0cd51152dab183c419d274ed35f3ed624d98adf93e41ef935667f96ecb7455db8ee65489fb25fc8fc8e85ff33af5967feb57a6cbbaa

  • SSDEEP

    1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnp:Knonoros9Pkbpe+zOo6EwBjnp

Score
8/10

Malware Config

Targets

    • Target

      9f66c66294e99eaaec5a5f879356b78d7a104d30a47b33dfc33ae7d5999c35fc

    • Size

      71KB

    • MD5

      102d682a39cf25cbeb715524b90df960

    • SHA1

      15f0bc341f613e6223ba2483c56f89700bd3a442

    • SHA256

      9f66c66294e99eaaec5a5f879356b78d7a104d30a47b33dfc33ae7d5999c35fc

    • SHA512

      e73e1240b598b84b2f18e0cd51152dab183c419d274ed35f3ed624d98adf93e41ef935667f96ecb7455db8ee65489fb25fc8fc8e85ff33af5967feb57a6cbbaa

    • SSDEEP

      1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnp:Knonoros9Pkbpe+zOo6EwBjnp

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks