Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7feafbb48b...cc.exe

windows7-x64

8

7feafbb48b...cc.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7feafbb48b8f2053f57994033770a4d4b0f34ef4a368a99667c644d8492597cc

  • Size

    233KB

  • Sample

    221201-c7anesbg5s

  • MD5

    6b46424f311e8788cbe403da7fc4971e

  • SHA1

    35dc2391baf98941fc1df37864a36f141fd42e16

  • SHA256

    7feafbb48b8f2053f57994033770a4d4b0f34ef4a368a99667c644d8492597cc

  • SHA512

    75db704d38909b708dce4ab3570af4e37c81038cf76c078469d210452c1f58dd46d11239b4b7142bdfdcd2d3103492ff8b8980278e34a0f2b0325234151bdc9c

  • SSDEEP

    6144:zSbxtD9NyTRduYTF8Lt5slJARjzy0AjgTz:OxHNy9TSbLRK5

Score
8/10
persistence

Malware Config

Targets

    • Target

      7feafbb48b8f2053f57994033770a4d4b0f34ef4a368a99667c644d8492597cc

    • Size

      233KB

    • MD5

      6b46424f311e8788cbe403da7fc4971e

    • SHA1

      35dc2391baf98941fc1df37864a36f141fd42e16

    • SHA256

      7feafbb48b8f2053f57994033770a4d4b0f34ef4a368a99667c644d8492597cc

    • SHA512

      75db704d38909b708dce4ab3570af4e37c81038cf76c078469d210452c1f58dd46d11239b4b7142bdfdcd2d3103492ff8b8980278e34a0f2b0325234151bdc9c

    • SSDEEP

      6144:zSbxtD9NyTRduYTF8Lt5slJARjzy0AjgTz:OxHNy9TSbLRK5

    Score
    8/10
    persistence

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks