77f008cf7ccbf955effd76539c61bc1fbdae2a3d7ad454a2d62a5f77b8ffdf09 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

7788f918e3...d5.exe

windows7-x64

7788f918e3...d5.exe

windows10-2004-x64

Sharing

General

Target

7788f918e326ff936886e276daf498d5
Size

847KB
Sample

231226-sdtr7sachk
MD5

7788f918e326ff936886e276daf498d5
SHA1

a90de1847e7f5c8023bb8f50e5d6009e8722ca30
SHA256

77f008cf7ccbf955effd76539c61bc1fbdae2a3d7ad454a2d62a5f77b8ffdf09
SHA512

888f727301132236d8ed94c8d54067ea31ba57b44cc73a0b202e10af3711c958b735706b9fea7025e1bec35a37401f0c8610d11c57128dd7bf8dbb7c92da1222
SSDEEP

24576:SMupXJRPOzlxZ9FQibk17za1zjTYR3e7t/eYBmMLy8OnQJ:Fu1JRPOzPZQrmDg3exNBfOne

Score

10^/10

microsoft evasion phishing trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

7788f918e326ff936886e276daf498d5.exe

Resource

win7-20231215-en

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

7788f918e326ff936886e276daf498d5.exe

Resource

win10v2004-20231215-en

microsoft evasion phishing trojan

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  7788f918e326ff936886e276daf498d5
- Size
  
  847KB
- MD5
  
  7788f918e326ff936886e276daf498d5
- SHA1
  
  a90de1847e7f5c8023bb8f50e5d6009e8722ca30
- SHA256
  
  77f008cf7ccbf955effd76539c61bc1fbdae2a3d7ad454a2d62a5f77b8ffdf09
- SHA512
  
  888f727301132236d8ed94c8d54067ea31ba57b44cc73a0b202e10af3711c958b735706b9fea7025e1bec35a37401f0c8610d11c57128dd7bf8dbb7c92da1222
- SSDEEP
  
  24576:SMupXJRPOzlxZ9FQibk17za1zjTYR3e7t/eYBmMLy8OnQJ:Fu1JRPOzPZQrmDg3exNBfOne
Score

10^/10

evasion trojan microsoft phishing
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftevasionphishingtrojan

© 2018-2025

Terms | Privacy