Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2.exe

windows7-x64

10

2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2.exe

  • Size

    525KB

  • Sample

    231123-nyvssahe67

  • MD5

    91fbfad8dd2f4e1e58edce52ac0e2d93

  • SHA1

    6b2205d2d86131d66dd27eb59a2465e4e5560b02

  • SHA256

    04838640b4ef54b164d69d2117c6b2b8c59a426cd46f33380d99c298fd636afa

  • SHA512

    46fcfb66c4b76b9307b17272aa0f90d0096292f54b02d26a5f714165f77987658b78e352e712b188cb786fc89ab1c59da617ec104f80e041f60bf13f4385a556

  • SSDEEP

    12288:UMwwkS7HrstA/a2Ew628F6SeGjtvP10jhHJ72MYUdklA:UMwwpN/BEw628F6SewtvP1Y726dUA

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      2.exe

    • Size

      525KB

    • MD5

      91fbfad8dd2f4e1e58edce52ac0e2d93

    • SHA1

      6b2205d2d86131d66dd27eb59a2465e4e5560b02

    • SHA256

      04838640b4ef54b164d69d2117c6b2b8c59a426cd46f33380d99c298fd636afa

    • SHA512

      46fcfb66c4b76b9307b17272aa0f90d0096292f54b02d26a5f714165f77987658b78e352e712b188cb786fc89ab1c59da617ec104f80e041f60bf13f4385a556

    • SSDEEP

      12288:UMwwkS7HrstA/a2Ew628F6SeGjtvP10jhHJ72MYUdklA:UMwwpN/BEw628F6SewtvP1Y726dUA

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks