Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

af16b8da09...c5.exe

windows7-x64

9

af16b8da09...c5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af16b8da09413d233aa5d3d34f20c71679da143ddd762c38f4f5b5b4052e2dc5

  • Size

    562KB

  • Sample

    221203-sqylxsbh59

  • MD5

    f8fcab511d006b23287b1d792bce3641

  • SHA1

    0a784ac49f96a30e6738bde90cdd724b23d04d0b

  • SHA256

    af16b8da09413d233aa5d3d34f20c71679da143ddd762c38f4f5b5b4052e2dc5

  • SHA512

    79d950eec3d7e98c858c0e6ff42721f63354a2eefa2a7b05227abbecd8d7f9dec8fc53f9619125cf000fcc74057eb9b2cf5fab3fd1e5f9fb10537fbdf39f1aef

  • SSDEEP

    12288:kgHNiwwE4jjTI1hjEKp1+JbW9DqXe48YkCMaX7rlo+noJIv:lHoEMInQC1+9W9Dqj8dCZ/lTn

Score
9/10
aspackv2evasion

Malware Config

Targets

    • Target

      af16b8da09413d233aa5d3d34f20c71679da143ddd762c38f4f5b5b4052e2dc5

    • Size

      562KB

    • MD5

      f8fcab511d006b23287b1d792bce3641

    • SHA1

      0a784ac49f96a30e6738bde90cdd724b23d04d0b

    • SHA256

      af16b8da09413d233aa5d3d34f20c71679da143ddd762c38f4f5b5b4052e2dc5

    • SHA512

      79d950eec3d7e98c858c0e6ff42721f63354a2eefa2a7b05227abbecd8d7f9dec8fc53f9619125cf000fcc74057eb9b2cf5fab3fd1e5f9fb10537fbdf39f1aef

    • SSDEEP

      12288:kgHNiwwE4jjTI1hjEKp1+JbW9DqXe48YkCMaX7rlo+noJIv:lHoEMInQC1+9W9Dqj8dCZ/lTn

    Score
    9/10
    evasion

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks