Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

b37747c439...66.exe

windows7-x64

10

b37747c439...66.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b37747c43979de2da7bc6e87031757b61c240de6bbd66ff036793ca5b565a866

  • Size

    80KB

  • Sample

    221204-adedeadb8x

  • MD5

    647f4fa1dd79369052b83861b0125d7f

  • SHA1

    acbf5aaa6184a3e13a56eee50605b99dc073fbe5

  • SHA256

    b37747c43979de2da7bc6e87031757b61c240de6bbd66ff036793ca5b565a866

  • SHA512

    654e3e85f47a40465edf1030b7c0315a7395d581ab4031f907a2812e2c0f51074cfc63872d2223467ddbcdfa7b4868fe0b44ec142f83c611d4c92ff124ca46f2

  • SSDEEP

    1536:/95S7dmlVz/P6N2tvrKebf5UzeVFYjCKyDn/IyHglOJJWSaVwzSiC2d:/LS7Qzam225UCVsCK27JJWSaViSib

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      b37747c43979de2da7bc6e87031757b61c240de6bbd66ff036793ca5b565a866

    • Size

      80KB

    • MD5

      647f4fa1dd79369052b83861b0125d7f

    • SHA1

      acbf5aaa6184a3e13a56eee50605b99dc073fbe5

    • SHA256

      b37747c43979de2da7bc6e87031757b61c240de6bbd66ff036793ca5b565a866

    • SHA512

      654e3e85f47a40465edf1030b7c0315a7395d581ab4031f907a2812e2c0f51074cfc63872d2223467ddbcdfa7b4868fe0b44ec142f83c611d4c92ff124ca46f2

    • SSDEEP

      1536:/95S7dmlVz/P6N2tvrKebf5UzeVFYjCKyDn/IyHglOJJWSaVwzSiC2d:/LS7Qzam225UCVsCK27JJWSaViSib

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks