Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

79a9640a59...6b.exe

windows7-x64

8

79a9640a59...6b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79a9640a5963508a4ec0ee377e4279a9fefcb6ea9ffc32072944c8dee039d26b

  • Size

    303KB

  • Sample

    221207-ejh11afe3y

  • MD5

    0670f593b0bb7eede65397c7cf0562c6

  • SHA1

    ad6a176cc9d3b860f9784f627c0a96f856b9b394

  • SHA256

    79a9640a5963508a4ec0ee377e4279a9fefcb6ea9ffc32072944c8dee039d26b

  • SHA512

    d15c86c6968f7f6d4c18cd840729c3642edf56df846cfaf1b2334e515a9191d732cf1cd5a062314cc6a8f98c44ebed9e8747dc051ffc717236c78e65fa070573

  • SSDEEP

    6144:zxDPnPsHhCeTcT3qA3H1+L0UCxx5Mr38U6TgRoRw4MziGybX2czYcCW9U1:zJPnPiT83qeHsL+75Mb8UrdNzTylzYc2

Score
8/10
persistence

Malware Config

Targets

    • Target

      79a9640a5963508a4ec0ee377e4279a9fefcb6ea9ffc32072944c8dee039d26b

    • Size

      303KB

    • MD5

      0670f593b0bb7eede65397c7cf0562c6

    • SHA1

      ad6a176cc9d3b860f9784f627c0a96f856b9b394

    • SHA256

      79a9640a5963508a4ec0ee377e4279a9fefcb6ea9ffc32072944c8dee039d26b

    • SHA512

      d15c86c6968f7f6d4c18cd840729c3642edf56df846cfaf1b2334e515a9191d732cf1cd5a062314cc6a8f98c44ebed9e8747dc051ffc717236c78e65fa070573

    • SSDEEP

      6144:zxDPnPsHhCeTcT3qA3H1+L0UCxx5Mr38U6TgRoRw4MziGybX2czYcCW9U1:zJPnPiT83qeHsL+75Mb8UrdNzTylzYc2

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks