Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

decoded.exe

windows7-x64

6

decoded.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    decoded

  • Size

    1.3MB

  • Sample

    230130-tra3paba77

  • MD5

    2d48214132e5c4d808740e71ec5f6a7f

  • SHA1

    f3c7534d9f139782006b5656ec0d229d8d9d356e

  • SHA256

    c1fadb8e09ba1257f7656be5a1c8d44e2a0da8697e8e0a32485714949a6c29ca

  • SHA512

    71b38bc31ecd199d3408e831c0cda0b0fbce6b363d5da3500767ff2a9a02fc0b3990512085d8d44e25b50e87eceaf4527e58d9c3e0a0802efbc3164af94a77a2

  • SSDEEP

    24576:LMmDOoI0Acd30rkQS8nikHN+KNzPKqQRD2F2PcAFdiqP1t/qiSlJjKGY:LMelI0AA0rkQznikHnNyn62PVFLtiiSO

Score
10/10
persistence

Malware Config

Targets

    • Target

      decoded

    • Size

      1.3MB

    • MD5

      2d48214132e5c4d808740e71ec5f6a7f

    • SHA1

      f3c7534d9f139782006b5656ec0d229d8d9d356e

    • SHA256

      c1fadb8e09ba1257f7656be5a1c8d44e2a0da8697e8e0a32485714949a6c29ca

    • SHA512

      71b38bc31ecd199d3408e831c0cda0b0fbce6b363d5da3500767ff2a9a02fc0b3990512085d8d44e25b50e87eceaf4527e58d9c3e0a0802efbc3164af94a77a2

    • SSDEEP

      24576:LMmDOoI0Acd30rkQS8nikHN+KNzPKqQRD2F2PcAFdiqP1t/qiSlJjKGY:LMelI0AA0rkQznikHnNyn62PVFLtiiSO

    Score
    10/10
    persistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks