Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

0fe398a85a...55.exe

windows7-x64

8

0fe398a85a...55.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fe398a85a1023353bd221c6089ac7f79dc4dc7a6647ba089662de5387f4a955

  • Size

    283KB

  • Sample

    221201-gs8dcsee8w

  • MD5

    9eff4dc732c8793104cf8d670b81da80

  • SHA1

    7b76201b0f57de97706a32931e0a7916e5bf4b8c

  • SHA256

    0fe398a85a1023353bd221c6089ac7f79dc4dc7a6647ba089662de5387f4a955

  • SHA512

    b96c9e68085fde13bfcc77fe879177a4a34e0267ea20e28554e28275066d188384d9e503687516e51513d81284005258dfcc77749e725f3ac40afd1a17f310c2

  • SSDEEP

    6144:MCSTrIE3jL7cIFbqQPCLheqvJ8iDBvn4nK6MRSlLO+bL:bmjLtBXUheqvGiFv4nK6ASE+H

Score
8/10
persistence

Malware Config

Targets

    • Target

      0fe398a85a1023353bd221c6089ac7f79dc4dc7a6647ba089662de5387f4a955

    • Size

      283KB

    • MD5

      9eff4dc732c8793104cf8d670b81da80

    • SHA1

      7b76201b0f57de97706a32931e0a7916e5bf4b8c

    • SHA256

      0fe398a85a1023353bd221c6089ac7f79dc4dc7a6647ba089662de5387f4a955

    • SHA512

      b96c9e68085fde13bfcc77fe879177a4a34e0267ea20e28554e28275066d188384d9e503687516e51513d81284005258dfcc77749e725f3ac40afd1a17f310c2

    • SSDEEP

      6144:MCSTrIE3jL7cIFbqQPCLheqvJ8iDBvn4nK6MRSlLO+bL:bmjLtBXUheqvGiFv4nK6ASE+H

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks