Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ff96856119...4a.exe

windows7-x64

8

ff96856119...4a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff9685611993f987520cac9180f8b49afbb84adc109bfc912712254b85b5094a

  • Size

    313KB

  • Sample

    221206-x6lphsad3v

  • MD5

    eadb3bf1c491a14b11ea029ee995c89d

  • SHA1

    d6a35ac9a12a9b2f3d63c3a42dcb795032bf35d1

  • SHA256

    ff9685611993f987520cac9180f8b49afbb84adc109bfc912712254b85b5094a

  • SHA512

    aab6bc5c621e21122b37d214a6178d14f3ce1801d06dc265cd8396fa7c3ab5691d7340e32e637aa54f6e7ed3e36e92a6e1e3d337107f31433d230d4cced01a4f

  • SSDEEP

    6144:yzjGe0QzQTyVrO+mDiKpMSIqmUKtwj5+nHNs9RsiYsyiRO3VZNZY:yPYQcTUqBDigRdmUQ8QXOOnNZ

Score
8/10
persistence

Malware Config

Targets

    • Target

      ff9685611993f987520cac9180f8b49afbb84adc109bfc912712254b85b5094a

    • Size

      313KB

    • MD5

      eadb3bf1c491a14b11ea029ee995c89d

    • SHA1

      d6a35ac9a12a9b2f3d63c3a42dcb795032bf35d1

    • SHA256

      ff9685611993f987520cac9180f8b49afbb84adc109bfc912712254b85b5094a

    • SHA512

      aab6bc5c621e21122b37d214a6178d14f3ce1801d06dc265cd8396fa7c3ab5691d7340e32e637aa54f6e7ed3e36e92a6e1e3d337107f31433d230d4cced01a4f

    • SSDEEP

      6144:yzjGe0QzQTyVrO+mDiKpMSIqmUKtwj5+nHNs9RsiYsyiRO3VZNZY:yPYQcTUqBDigRdmUQ8QXOOnNZ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks