Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

831c4b63b1...81.exe

windows7-x64

8

831c4b63b1...81.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    831c4b63b18e6cbd1ff923572172e3517050ea187041d99c727430ee648bca81

  • Size

    71KB

  • Sample

    221205-qf3rsagc3w

  • MD5

    ff0ce7f9ce4f7d29b61d1c9c21438609

  • SHA1

    37e5c230571f12f774b2f584a4741967c615d6de

  • SHA256

    831c4b63b18e6cbd1ff923572172e3517050ea187041d99c727430ee648bca81

  • SHA512

    18f8e0c82904551c3040ecafea7ad4a1acae2a1e8075a27642a950b248287b863d61f69a7b13cfa9cad13f394d65c5859484b15c7940c171b04844b3737d412a

  • SSDEEP

    1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnv:Knonoros9Pkbpe+zOo6EwBjnv

Score
8/10

Malware Config

Targets

    • Target

      831c4b63b18e6cbd1ff923572172e3517050ea187041d99c727430ee648bca81

    • Size

      71KB

    • MD5

      ff0ce7f9ce4f7d29b61d1c9c21438609

    • SHA1

      37e5c230571f12f774b2f584a4741967c615d6de

    • SHA256

      831c4b63b18e6cbd1ff923572172e3517050ea187041d99c727430ee648bca81

    • SHA512

      18f8e0c82904551c3040ecafea7ad4a1acae2a1e8075a27642a950b248287b863d61f69a7b13cfa9cad13f394d65c5859484b15c7940c171b04844b3737d412a

    • SSDEEP

      1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnv:Knonoros9Pkbpe+zOo6EwBjnv

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks