Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

4a1b947afa...e8.exe

windows7-x64

7

4a1b947afa...e8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8.exe

  • Size

    903KB

  • Sample

    221206-pswzbshd57

  • MD5

    bd504733b77379626bb356fd406069d1

  • SHA1

    da4fef844c151580301c38ee2482c02c34ec9a16

  • SHA256

    4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8

  • SHA512

    fe3a45c7a465bf785b0e350f087c6437a0b0822fb240af054344dc9a65a5ab87b681cde8b0b655a807f218e65b4b98ad6e6c3eb04b3ac0fdcef865e4ac0ce203

  • SSDEEP

    12288:RhCXoQFpwZq9D4SMSgxTWVGyKGd8xJWqfoaouPHXU+V3oYb8jG3RVaHf:vCXowpwX1VWgy/WxJWA/XU+Yh//

Score
7/10
discovery

Malware Config

Targets

    • Target

      4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8.exe

    • Size

      903KB

    • MD5

      bd504733b77379626bb356fd406069d1

    • SHA1

      da4fef844c151580301c38ee2482c02c34ec9a16

    • SHA256

      4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8

    • SHA512

      fe3a45c7a465bf785b0e350f087c6437a0b0822fb240af054344dc9a65a5ab87b681cde8b0b655a807f218e65b4b98ad6e6c3eb04b3ac0fdcef865e4ac0ce203

    • SSDEEP

      12288:RhCXoQFpwZq9D4SMSgxTWVGyKGd8xJWqfoaouPHXU+V3oYb8jG3RVaHf:vCXowpwX1VWgy/WxJWA/XU+Yh//

    Score
    7/10
    discovery

    • Checks QEMU agent file

      Checks presence of QEMU agent, possibly to detect virtualization.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks