Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

077bba96c2...b7.exe

windows7-x64

8

077bba96c2...b7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    077bba96c20f540c99af359017f8966c3a20c8bc001e2cc45efde8b118b928b7

  • Size

    196KB

  • Sample

    221205-ga5vhsae44

  • MD5

    118e682b7bd13ce6cda5288497f40359

  • SHA1

    60ec167de135479f796e358f7b26410efaaa2220

  • SHA256

    077bba96c20f540c99af359017f8966c3a20c8bc001e2cc45efde8b118b928b7

  • SHA512

    459a90100ddffd9a7418fe81568975d68a3dac86ddfe989612d778861cf523c4ff9b79aeb80a2d529a8403dcfbc45e9a7a7618ca7b9f38eed8b539bea3b0f12f

  • SSDEEP

    6144:CHA+22z5wDkMkSKCLg7pzgyvaFHn+xPT3bJ:UU2gk5R9HaFHQrrJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      077bba96c20f540c99af359017f8966c3a20c8bc001e2cc45efde8b118b928b7

    • Size

      196KB

    • MD5

      118e682b7bd13ce6cda5288497f40359

    • SHA1

      60ec167de135479f796e358f7b26410efaaa2220

    • SHA256

      077bba96c20f540c99af359017f8966c3a20c8bc001e2cc45efde8b118b928b7

    • SHA512

      459a90100ddffd9a7418fe81568975d68a3dac86ddfe989612d778861cf523c4ff9b79aeb80a2d529a8403dcfbc45e9a7a7618ca7b9f38eed8b539bea3b0f12f

    • SSDEEP

      6144:CHA+22z5wDkMkSKCLg7pzgyvaFHn+xPT3bJ:UU2gk5R9HaFHQrrJ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks