Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

b439c5c9bf...c7.exe

windows7-x64

8

b439c5c9bf...c7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b439c5c9bfad3de0d1f542ebb8f7be20bc021596dd137970c494a6ec450024c7

  • Size

    299KB

  • Sample

    231011-kynspaeg69

  • MD5

    e6870480bc03956ed54c346de31e5b4d

  • SHA1

    5301558b5647f549c177ad28f4a350335f9253e3

  • SHA256

    b439c5c9bfad3de0d1f542ebb8f7be20bc021596dd137970c494a6ec450024c7

  • SHA512

    25fcd31d003b0a6450b3ba97864d5baa9a0bb737cef0690395871987d2da45a5c1a16b5bf8c3ec448648afa58816d6d2dbccd5c073fc69a86f8ffab4c71710da

  • SSDEEP

    6144:kuayAdOPViZJzC8mLi/g8iF1NDupfB+U3MdLNfNXu2bwzUNH:nAdyiDzgW/i1NDeB+3Ju2bwa

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b439c5c9bfad3de0d1f542ebb8f7be20bc021596dd137970c494a6ec450024c7

    • Size

      299KB

    • MD5

      e6870480bc03956ed54c346de31e5b4d

    • SHA1

      5301558b5647f549c177ad28f4a350335f9253e3

    • SHA256

      b439c5c9bfad3de0d1f542ebb8f7be20bc021596dd137970c494a6ec450024c7

    • SHA512

      25fcd31d003b0a6450b3ba97864d5baa9a0bb737cef0690395871987d2da45a5c1a16b5bf8c3ec448648afa58816d6d2dbccd5c073fc69a86f8ffab4c71710da

    • SSDEEP

      6144:kuayAdOPViZJzC8mLi/g8iF1NDupfB+U3MdLNfNXu2bwzUNH:nAdyiDzgW/i1NDeB+3Ju2bwa

    Score
    8/10
    persistenceupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks