Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ec52e07050...0f.exe

windows7-x64

10

ec52e07050...0f.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec52e07050bd8f4b2e181dfbd2bc608ba9fdd446f2d58529bbc26dbd08594d0f

  • Size

    58KB

  • Sample

    221203-dny3cadb5z

  • MD5

    1706bc9b94a4eedd040d24e07909a3f0

  • SHA1

    97735129e341c8bc23f1e0e2c436b1053811b7d5

  • SHA256

    ec52e07050bd8f4b2e181dfbd2bc608ba9fdd446f2d58529bbc26dbd08594d0f

  • SHA512

    3214bbbb299eeae25b502f9cd1e326ab0dd9733da9ac65febe4a44c4480e33bc465553013086d51ae6a409f485abe787be25cbe2f38c6cde8510e5e0fe3cea46

  • SSDEEP

    1536:pM4WXwX8Cfst3awkwFMerjcTtUm2fA9VpSuC6ARUx90w2:pM588CrweefcBJ2IdSuC690w

Score
10/10
persistence

Malware Config

Targets

    • Target

      ec52e07050bd8f4b2e181dfbd2bc608ba9fdd446f2d58529bbc26dbd08594d0f

    • Size

      58KB

    • MD5

      1706bc9b94a4eedd040d24e07909a3f0

    • SHA1

      97735129e341c8bc23f1e0e2c436b1053811b7d5

    • SHA256

      ec52e07050bd8f4b2e181dfbd2bc608ba9fdd446f2d58529bbc26dbd08594d0f

    • SHA512

      3214bbbb299eeae25b502f9cd1e326ab0dd9733da9ac65febe4a44c4480e33bc465553013086d51ae6a409f485abe787be25cbe2f38c6cde8510e5e0fe3cea46

    • SSDEEP

      1536:pM4WXwX8Cfst3awkwFMerjcTtUm2fA9VpSuC6ARUx90w2:pM588CrweefcBJ2IdSuC690w

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks