Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5a63406b23...7e.exe

windows7-x64

1

5a63406b23...7e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a63406b23ff0dc56eea143b13854c7e

  • Size

    506KB

  • Sample

    240114-f1qb3sdfh2

  • MD5

    5a63406b23ff0dc56eea143b13854c7e

  • SHA1

    3b7ad1f6247663390c782aeae7f863262780a27f

  • SHA256

    396514c15cc576af9c3a5bdd5d69e5425d051d5ecd53b32597089f2695083e0f

  • SHA512

    765f86d217620b331419a2620f447721d26a19c157915ffd721b67a4ee47aa7e33a232d0732351dadada2501cd50b6cf36570d3ed79fd1d9d7bb2e05d5fa089d

  • SSDEEP

    12288:L+aV0E3JsEG0hQut+F4pAGdZQ1Sa9+/NXSvy4IvLVOOrvbL9sE84An5+X+r0XwVK:L+aV0E3JdG0hQut+F4pTdZQ1Sa9eSvyv

Score
7/10

Malware Config

Targets

    • Target

      5a63406b23ff0dc56eea143b13854c7e

    • Size

      506KB

    • MD5

      5a63406b23ff0dc56eea143b13854c7e

    • SHA1

      3b7ad1f6247663390c782aeae7f863262780a27f

    • SHA256

      396514c15cc576af9c3a5bdd5d69e5425d051d5ecd53b32597089f2695083e0f

    • SHA512

      765f86d217620b331419a2620f447721d26a19c157915ffd721b67a4ee47aa7e33a232d0732351dadada2501cd50b6cf36570d3ed79fd1d9d7bb2e05d5fa089d

    • SSDEEP

      12288:L+aV0E3JsEG0hQut+F4pAGdZQ1Sa9+/NXSvy4IvLVOOrvbL9sE84An5+X+r0XwVK:L+aV0E3JdG0hQut+F4pTdZQ1Sa9eSvyv

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks