Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

c364889284...e7.exe

windows7-x64

8

c364889284...e7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c364889284d850d29d87d4256d278fff6fd3e33e5125986bd1db8d06d9ebade7

  • Size

    183KB

  • Sample

    221203-q1b5kaef39

  • MD5

    481c4ca5ecf69b29592165da46a46e17

  • SHA1

    99f01ec39efa908cd1fc11eabaaf094c5cf087b7

  • SHA256

    c364889284d850d29d87d4256d278fff6fd3e33e5125986bd1db8d06d9ebade7

  • SHA512

    6586f5e8b5d36196b9209e6ce54f719970ac41d2b7a9e9b4ef6bb2a8f8891ab5dc6ff45a3f5bee5e44295fe5abbf24d0d79c6ef2473f1ba3cb64d266e02371a9

  • SSDEEP

    3072:o4ESNh11yAhOhjNvHcs5s37aCHwz8rmET/Qi0cj8t52EoT4umKO4vZEN:sSNfEhZv6hrtT/ag8bloT4YRE

Score
8/10
persistence

Malware Config

Targets

    • Target

      c364889284d850d29d87d4256d278fff6fd3e33e5125986bd1db8d06d9ebade7

    • Size

      183KB

    • MD5

      481c4ca5ecf69b29592165da46a46e17

    • SHA1

      99f01ec39efa908cd1fc11eabaaf094c5cf087b7

    • SHA256

      c364889284d850d29d87d4256d278fff6fd3e33e5125986bd1db8d06d9ebade7

    • SHA512

      6586f5e8b5d36196b9209e6ce54f719970ac41d2b7a9e9b4ef6bb2a8f8891ab5dc6ff45a3f5bee5e44295fe5abbf24d0d79c6ef2473f1ba3cb64d266e02371a9

    • SSDEEP

      3072:o4ESNh11yAhOhjNvHcs5s37aCHwz8rmET/Qi0cj8t52EoT4umKO4vZEN:sSNfEhZv6hrtT/ag8bloT4YRE

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks