Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3fbf60454a...bd.exe

windows7-x64

10

3fbf60454a...bd.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fbf60454aa6b09d1617ca32a07904f48cbe6893c85cff7f08a3920d32924ebd

  • Size

    241KB

  • Sample

    221206-mmgw4sda5w

  • MD5

    189738e8cffc167c85c54566f188cc7a

  • SHA1

    2987206cf8fb11aa97bb09fadfe6068f6d5edf13

  • SHA256

    3fbf60454aa6b09d1617ca32a07904f48cbe6893c85cff7f08a3920d32924ebd

  • SHA512

    7cca2b14ee292b166a62d842df75601845e2835413495a518556b603d8d11316eb816fedf0bec540c52b160298babb17c0ad74b9d2ab173012f4ad9c21d2a30b

  • SSDEEP

    3072:ydiwIZtYRzQUVXabUuYlT7Milg7HJ4lA6B889C7nco2KiiyZ:ydiwIZt5eao3lMi27ne889Icf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3fbf60454aa6b09d1617ca32a07904f48cbe6893c85cff7f08a3920d32924ebd

    • Size

      241KB

    • MD5

      189738e8cffc167c85c54566f188cc7a

    • SHA1

      2987206cf8fb11aa97bb09fadfe6068f6d5edf13

    • SHA256

      3fbf60454aa6b09d1617ca32a07904f48cbe6893c85cff7f08a3920d32924ebd

    • SHA512

      7cca2b14ee292b166a62d842df75601845e2835413495a518556b603d8d11316eb816fedf0bec540c52b160298babb17c0ad74b9d2ab173012f4ad9c21d2a30b

    • SSDEEP

      3072:ydiwIZtYRzQUVXabUuYlT7Milg7HJ4lA6B889C7nco2KiiyZ:ydiwIZt5eao3lMi27ne889Icf

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Sets service image path in registry

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks