Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

a1637c63ed...45.exe

windows7-x64

8

a1637c63ed...45.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1637c63ed41916f9bf75b3b246287a29d22cfc94ffdebc00741be7369373a45

  • Size

    220KB

  • Sample

    221203-3ezd7aaf6x

  • MD5

    76e7d0f84518c0ec1a7abaac8c41f0d6

  • SHA1

    a5b5bbe70aaeafd27ad835d782d0456a9f56785f

  • SHA256

    a1637c63ed41916f9bf75b3b246287a29d22cfc94ffdebc00741be7369373a45

  • SHA512

    9a261f0faab304c0bc3cdf8834cd587b655de0c6e713ce14b44e9d462192922e980422c3503c851797c4aed7f1043a8a60a9688cc845c66999f9e4f6f4795dd1

  • SSDEEP

    6144:xVS8anC7Pe0B+5jMUKHo2Wd4H/Bn+HRHgI957aRon2t:xVSLC7Pe0uMUSo1d4H/BnMRB57aRon2t

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a1637c63ed41916f9bf75b3b246287a29d22cfc94ffdebc00741be7369373a45

    • Size

      220KB

    • MD5

      76e7d0f84518c0ec1a7abaac8c41f0d6

    • SHA1

      a5b5bbe70aaeafd27ad835d782d0456a9f56785f

    • SHA256

      a1637c63ed41916f9bf75b3b246287a29d22cfc94ffdebc00741be7369373a45

    • SHA512

      9a261f0faab304c0bc3cdf8834cd587b655de0c6e713ce14b44e9d462192922e980422c3503c851797c4aed7f1043a8a60a9688cc845c66999f9e4f6f4795dd1

    • SSDEEP

      6144:xVS8anC7Pe0B+5jMUKHo2Wd4H/Bn+HRHgI957aRon2t:xVSLC7Pe0uMUSo1d4H/BnMRB57aRon2t

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks