Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21b3ec2a8f16bf7fb571925eda77f05c8c7a32fecd9c43cefba6223c47a80936

  • Size

    9.4MB

  • Sample

    230805-24vlvsgd8z

  • MD5

    718d69c7e8baa9b2fea5078ac9adf6b7

  • SHA1

    b409fa7ffde8cc8dbaff27ae6a51d3f599e0ed75

  • SHA256

    21b3ec2a8f16bf7fb571925eda77f05c8c7a32fecd9c43cefba6223c47a80936

  • SHA512

    ece9d1dac93453594fee0df92f8ad9ffa14ba17d4589773eac2c6f5ae1759d4b22e1067813245d2d5ab613d2b7c45173e5aebd1e72c7a720082474b76d403515

  • SSDEEP

    196608:ZeduW/gMzIXjpjzoc1fln3yenGNSZO8WD5UW:jWou0jtzoc1tn3yenG4g8s5UW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      21b3ec2a8f16bf7fb571925eda77f05c8c7a32fecd9c43cefba6223c47a80936

    • Size

      9.4MB

    • MD5

      718d69c7e8baa9b2fea5078ac9adf6b7

    • SHA1

      b409fa7ffde8cc8dbaff27ae6a51d3f599e0ed75

    • SHA256

      21b3ec2a8f16bf7fb571925eda77f05c8c7a32fecd9c43cefba6223c47a80936

    • SHA512

      ece9d1dac93453594fee0df92f8ad9ffa14ba17d4589773eac2c6f5ae1759d4b22e1067813245d2d5ab613d2b7c45173e5aebd1e72c7a720082474b76d403515

    • SSDEEP

      196608:ZeduW/gMzIXjpjzoc1fln3yenGNSZO8WD5UW:jWou0jtzoc1tn3yenG4g8s5UW

    Score
    8/10
    persistenceupx

    • Downloads MZ/PE file

    • Sets DLL path for service in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks