Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

75113397c1...8a.exe

windows7-x64

8

75113397c1...8a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a

  • Size

    414KB

  • Sample

    221205-k14lxshf4y

  • MD5

    2c8688371d1c42a94cd0b333b87b2793

  • SHA1

    d829456288e7f51a4cd873b93d94ec8c7892bf08

  • SHA256

    75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a

  • SHA512

    df2e9bcd426408f0e8e2c674ab7fbe32ec10e51f9ffd16be5653f14cd1ae5e143a8f03abe16eecb822a394726ecf8e7daf433f028ce1c88d95c6de1338525017

  • SSDEEP

    12288:HVgNzElYiFfJ45BFkg9wKQwxeysO1JngsiY5bN:1gV6rfC5BF3QTegGZN

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a

    • Size

      414KB

    • MD5

      2c8688371d1c42a94cd0b333b87b2793

    • SHA1

      d829456288e7f51a4cd873b93d94ec8c7892bf08

    • SHA256

      75113397c1ad61acb4a356aece3ece16afb7ddc73f71fd669b5dc0832aac5b8a

    • SHA512

      df2e9bcd426408f0e8e2c674ab7fbe32ec10e51f9ffd16be5653f14cd1ae5e143a8f03abe16eecb822a394726ecf8e7daf433f028ce1c88d95c6de1338525017

    • SSDEEP

      12288:HVgNzElYiFfJ45BFkg9wKQwxeysO1JngsiY5bN:1gV6rfC5BF3QTegGZN

    Score
    8/10
    evasionpersistenceupx

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks