Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

06265e97aa...4a.exe

windows7-x64

7

06265e97aa...4a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06265e97aac3790b69e1d955019b904a

  • Size

    146KB

  • Sample

    231224-t5gsdscbfr

  • MD5

    06265e97aac3790b69e1d955019b904a

  • SHA1

    6303504ea67878efba3a5fbefe5462abcedb862c

  • SHA256

    25d5313f483954f2b8c3255eaa63e8c5972a6064aa6d06ca49e19b0133d2bdc7

  • SHA512

    bf8041b38082b98b7e3193e4bd369837abc536c61d8e32037c7eb6659eb2aee35ea2a8ed912e5cdf0986533a12a57f477970730b7b83eed90d7bc7fa70139724

  • SSDEEP

    3072:XTutRluFz+AH3QKOjO2TQ7EJBz5OwnRoaXx7OuHZIuH1q7pSPNSycm:0RluFz+AXQ7jOcQ7yDLiQx7OuHZRqM

Score
7/10

Malware Config

Targets

    • Target

      06265e97aac3790b69e1d955019b904a

    • Size

      146KB

    • MD5

      06265e97aac3790b69e1d955019b904a

    • SHA1

      6303504ea67878efba3a5fbefe5462abcedb862c

    • SHA256

      25d5313f483954f2b8c3255eaa63e8c5972a6064aa6d06ca49e19b0133d2bdc7

    • SHA512

      bf8041b38082b98b7e3193e4bd369837abc536c61d8e32037c7eb6659eb2aee35ea2a8ed912e5cdf0986533a12a57f477970730b7b83eed90d7bc7fa70139724

    • SSDEEP

      3072:XTutRluFz+AH3QKOjO2TQ7EJBz5OwnRoaXx7OuHZIuH1q7pSPNSycm:0RluFz+AXQ7jOcQ7yDLiQx7OuHZRqM

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks