Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    decoded.exe

  • Size

    476KB

  • Sample

    230822-xp3lpsgc6v

  • MD5

    0ba33b5dbd3e450986c9627889575e26

  • SHA1

    72e01bab823dea6d24f340481c8fd860ecb94ffd

  • SHA256

    0758bae88bcbffe93e6022920e7dac6f76c3d00a6d0948eb46eaf6b4db6324d2

  • SHA512

    f0159b06a2dc99d260a2bb6c756838956a6a79528a76a8f81f7a4e1f6b11222346d450b373c5f7a71dffa36c25a4d5f40d8cd68ee49b211044c3c92e4d392970

  • SSDEEP

    12288:l0yYjNuWRUFBV0JBnSA/e8MosoxXn9+ECqnub/hlrn:lDquW+50jnSA2Toso19lC+ubhRn

Score
10/10

Malware Config

Targets

    • Target

      decoded.exe

    • Size

      476KB

    • MD5

      0ba33b5dbd3e450986c9627889575e26

    • SHA1

      72e01bab823dea6d24f340481c8fd860ecb94ffd

    • SHA256

      0758bae88bcbffe93e6022920e7dac6f76c3d00a6d0948eb46eaf6b4db6324d2

    • SHA512

      f0159b06a2dc99d260a2bb6c756838956a6a79528a76a8f81f7a4e1f6b11222346d450b373c5f7a71dffa36c25a4d5f40d8cd68ee49b211044c3c92e4d392970

    • SSDEEP

      12288:l0yYjNuWRUFBV0JBnSA/e8MosoxXn9+ECqnub/hlrn:lDquW+50jnSA2Toso19lC+ubhRn

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v15

Tasks