Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ecf61cc6b2...1a.exe

windows7-x64

8

ecf61cc6b2...1a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecf61cc6b25b3b3f7eeeb209c42eac8edc8b8e008485774dcb9c19c7c84b9d1a

  • Size

    305KB

  • Sample

    221201-ttm52aaf9y

  • MD5

    ca0661075011895266cbbe90bb7e97c3

  • SHA1

    597103c85b2172e26034fbcc68902d79b639d873

  • SHA256

    ecf61cc6b25b3b3f7eeeb209c42eac8edc8b8e008485774dcb9c19c7c84b9d1a

  • SHA512

    783a93120093768123f9c1af5feab39ddee1c9a8cab1aeb56f223f6074aa062ec2add377b10939fd6194bc2fc764950e7d18fb2f5ac08432b6c57fb65fb2a33b

  • SSDEEP

    6144:dG+2lnHHnHrLrLLrLrDipQTVT5KYD4l/3JKoPUGlnDJuG855+Hg1Wms7pSr1CES:dFbKKw4lhKMnND8IyWms7psCES

Score
8/10
persistence

Malware Config

Targets

    • Target

      ecf61cc6b25b3b3f7eeeb209c42eac8edc8b8e008485774dcb9c19c7c84b9d1a

    • Size

      305KB

    • MD5

      ca0661075011895266cbbe90bb7e97c3

    • SHA1

      597103c85b2172e26034fbcc68902d79b639d873

    • SHA256

      ecf61cc6b25b3b3f7eeeb209c42eac8edc8b8e008485774dcb9c19c7c84b9d1a

    • SHA512

      783a93120093768123f9c1af5feab39ddee1c9a8cab1aeb56f223f6074aa062ec2add377b10939fd6194bc2fc764950e7d18fb2f5ac08432b6c57fb65fb2a33b

    • SSDEEP

      6144:dG+2lnHHnHrLrLLrLrDipQTVT5KYD4l/3JKoPUGlnDJuG855+Hg1Wms7pSr1CES:dFbKKw4lhKMnND8IyWms7psCES

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks