Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

b397645cd8...61.exe

windows7-x64

10

b397645cd8...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561

  • Size

    72KB

  • Sample

    221203-hvfxkahc81

  • MD5

    74f1fd62fa0476f7067e130172e0b143

  • SHA1

    ebbe72c042364460f78e582acdd4ed833beb7177

  • SHA256

    b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561

  • SHA512

    f3d82a504cd798fe87450a046038b15c37779474218a88457d18e6ce2d7ec566553b9c4cb885ede70d3e47d5fce05755c840f1c66e30642aa14ef5098ba58e91

  • SSDEEP

    768:WxnxLtm2zqVypjPzmRcmHm1kiRpcrmrsUEt4WtKDLOK8su4b1SoWge9Tn3:WxZqVyp+3G1klrrt4WQDLOyuO1RW77

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561

    • Size

      72KB

    • MD5

      74f1fd62fa0476f7067e130172e0b143

    • SHA1

      ebbe72c042364460f78e582acdd4ed833beb7177

    • SHA256

      b397645cd81b7c89aeee9ca2a4870a60ca245fbd0a5f226280f66a8a3323c561

    • SHA512

      f3d82a504cd798fe87450a046038b15c37779474218a88457d18e6ce2d7ec566553b9c4cb885ede70d3e47d5fce05755c840f1c66e30642aa14ef5098ba58e91

    • SSDEEP

      768:WxnxLtm2zqVypjPzmRcmHm1kiRpcrmrsUEt4WtKDLOK8su4b1SoWge9Tn3:WxZqVyp+3G1klrrt4WQDLOyuO1RW77

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks