Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b89a14df1f...90.exe

windows7-x64

8

b89a14df1f...90.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b89a14df1fe68514c58810ec421ff60168888b6971a1a46ff97d4474b925fd90

  • Size

    204KB

  • Sample

    221205-jr263aab55

  • MD5

    896bee8216e0354b2dce57cbf95fdcae

  • SHA1

    34bb0f59699b5a70c6e924a6128dbe8c4726fd33

  • SHA256

    b89a14df1fe68514c58810ec421ff60168888b6971a1a46ff97d4474b925fd90

  • SHA512

    e40efb01c47fa08a77985a8151bc75978e19a8a38f51ee12dcfdfd8a932b6920a97999bd1186c01405266d80fab718447d8edf18f649aeaa09e630ed3cfea427

  • SSDEEP

    6144:bcdOSKq1G5JU09zZd6n0xWWq2oM3/wCeeR0AI01Ak:wwi8Ugz+NG/wQvI0

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      b89a14df1fe68514c58810ec421ff60168888b6971a1a46ff97d4474b925fd90

    • Size

      204KB

    • MD5

      896bee8216e0354b2dce57cbf95fdcae

    • SHA1

      34bb0f59699b5a70c6e924a6128dbe8c4726fd33

    • SHA256

      b89a14df1fe68514c58810ec421ff60168888b6971a1a46ff97d4474b925fd90

    • SHA512

      e40efb01c47fa08a77985a8151bc75978e19a8a38f51ee12dcfdfd8a932b6920a97999bd1186c01405266d80fab718447d8edf18f649aeaa09e630ed3cfea427

    • SSDEEP

      6144:bcdOSKq1G5JU09zZd6n0xWWq2oM3/wCeeR0AI01Ak:wwi8Ugz+NG/wQvI0

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks