Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

95f3bedbe8...a9.exe

windows7-x64

8

95f3bedbe8...a9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9

  • Size

    206KB

  • Sample

    221205-knpx1agf5s

  • MD5

    815d2b15498f88239ae8557655c62609

  • SHA1

    d0a181764abd86f8a1bf9736cd5a7b29f842dc93

  • SHA256

    95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9

  • SHA512

    1d5c5d813558e81b429a6cc232c2f93c590fc4e651676dff441fd873c6e92fa80b07cf55b011921047ab699178d870e90bc0e04d906e89a6b3b8fe12d398f835

  • SSDEEP

    6144:1BC1Q7cIkNzakJen1IwtVKeKy23y0I6Q1hM:1BC1Q7NEWkJen1I8VJKy2i0fAh

Score
8/10

Malware Config

Targets

    • Target

      95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9

    • Size

      206KB

    • MD5

      815d2b15498f88239ae8557655c62609

    • SHA1

      d0a181764abd86f8a1bf9736cd5a7b29f842dc93

    • SHA256

      95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9

    • SHA512

      1d5c5d813558e81b429a6cc232c2f93c590fc4e651676dff441fd873c6e92fa80b07cf55b011921047ab699178d870e90bc0e04d906e89a6b3b8fe12d398f835

    • SSDEEP

      6144:1BC1Q7cIkNzakJen1IwtVKeKy23y0I6Q1hM:1BC1Q7NEWkJen1I8VJKy2i0fAh

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks