Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0dbae335cec36530adfeedf92be6bcbc

  • Size

    184KB

  • Sample

    231225-hyhwbsbda8

  • MD5

    0dbae335cec36530adfeedf92be6bcbc

  • SHA1

    992aa3f8030e49c173d8e938b7e90389edc446ee

  • SHA256

    2c9cfc5a90131a5ea58a412c4f58994f739110f041325cfed3a80d482f5345fa

  • SHA512

    8a17300468ce35beae3de2448e99b8d83310d64be14d12a2deb58a2d26275e5ca416c76eb81b695927d71fd0b36a3e49a44a6a0d67b33fc9c743b8e65d1b1e99

  • SSDEEP

    3072:1YeYFacsza2Pgl+AHcz+z85Z0Lp5+Bh+pMo0y7yxLyBIjXAGqC:1YepGQgsBK85Z0LpYBhIExLIC

Score
7/10

Malware Config

Targets

    • Target

      0dbae335cec36530adfeedf92be6bcbc

    • Size

      184KB

    • MD5

      0dbae335cec36530adfeedf92be6bcbc

    • SHA1

      992aa3f8030e49c173d8e938b7e90389edc446ee

    • SHA256

      2c9cfc5a90131a5ea58a412c4f58994f739110f041325cfed3a80d482f5345fa

    • SHA512

      8a17300468ce35beae3de2448e99b8d83310d64be14d12a2deb58a2d26275e5ca416c76eb81b695927d71fd0b36a3e49a44a6a0d67b33fc9c743b8e65d1b1e99

    • SSDEEP

      3072:1YeYFacsza2Pgl+AHcz+z85Z0Lp5+Bh+pMo0y7yxLyBIjXAGqC:1YepGQgsBK85Z0LpYBhIExLIC

    Score
    7/10
    • Deletes itself

    • Registers COM server for autorun

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks