Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

1bb6665644...09.exe

windows7-x64

7

1bb6665644...09.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bb666564410e31f11b5f3fcf232e509

  • Size

    506KB

  • Sample

    231230-y3wkzsfcc3

  • MD5

    1bb666564410e31f11b5f3fcf232e509

  • SHA1

    89055b178b6009fe94f82d6ef2b1504c2e4ac9f0

  • SHA256

    d17fd1cde8dce6e2ab3e1131e21961d2e9759586b2678b386b7c259df35d75e9

  • SHA512

    98348cb7bbef21212a20442d2702bb27d9b330338be92a2c3c2bb1667d5dde18249ec76389f99bc5f9173387bcdd36ab80d7650314d2decee9b342557e806861

  • SSDEEP

    6144:aTZAUsUEjwgafxU5a90BSZGh5sKU4WP7F0048Sbgf5s+RHNYYd7hM0oWc:aVPshjoZU5aoZhM7PSUxs+RHGudMBJ

Score
7/10

Malware Config

Targets

    • Target

      1bb666564410e31f11b5f3fcf232e509

    • Size

      506KB

    • MD5

      1bb666564410e31f11b5f3fcf232e509

    • SHA1

      89055b178b6009fe94f82d6ef2b1504c2e4ac9f0

    • SHA256

      d17fd1cde8dce6e2ab3e1131e21961d2e9759586b2678b386b7c259df35d75e9

    • SHA512

      98348cb7bbef21212a20442d2702bb27d9b330338be92a2c3c2bb1667d5dde18249ec76389f99bc5f9173387bcdd36ab80d7650314d2decee9b342557e806861

    • SSDEEP

      6144:aTZAUsUEjwgafxU5a90BSZGh5sKU4WP7F0048Sbgf5s+RHNYYd7hM0oWc:aVPshjoZU5aoZhM7PSUxs+RHGudMBJ

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks