Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6529e19692...d4.exe

windows7-x64

10

6529e19692...d4.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6529e196929b7761c5cd5034a5eb478d8665b7d537755acd2693ce734bec48d4.exe

  • Size

    653KB

  • Sample

    240213-dgg59adc8y

  • MD5

    39ec842756e01eb17542974aae74c30a

  • SHA1

    461e89517eba220c242065f60a7f11dc5e679765

  • SHA256

    6529e196929b7761c5cd5034a5eb478d8665b7d537755acd2693ce734bec48d4

  • SHA512

    fb9984954882e5c5d5f75a2e3cedacd9734bcfcd5eb5a4d5a3176e12f19cc1e142f8b3855f0710cce715919becb62bac0a25750eb7ebb571dead83d8b29b4f51

  • SSDEEP

    12288:wop/kb5q37+1/GygOiDFG+Jud5EVsFPNYsxMkkSdWDdaX480BjCy:wou4/ygOYFG+qFYsxiSUdw1IjT

Score
10/10
guloaderdownloaderpersistence

Malware Config

Targets

    • Target

      6529e196929b7761c5cd5034a5eb478d8665b7d537755acd2693ce734bec48d4.exe

    • Size

      653KB

    • MD5

      39ec842756e01eb17542974aae74c30a

    • SHA1

      461e89517eba220c242065f60a7f11dc5e679765

    • SHA256

      6529e196929b7761c5cd5034a5eb478d8665b7d537755acd2693ce734bec48d4

    • SHA512

      fb9984954882e5c5d5f75a2e3cedacd9734bcfcd5eb5a4d5a3176e12f19cc1e142f8b3855f0710cce715919becb62bac0a25750eb7ebb571dead83d8b29b4f51

    • SSDEEP

      12288:wop/kb5q37+1/GygOiDFG+Jud5EVsFPNYsxMkkSdWDdaX480BjCy:wou4/ygOYFG+qFYsxiSUdw1IjT

    Score
    10/10
    guloaderdownloaderpersistence

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      3f176d1ee13b0d7d6bd92e1c7a0b9bae

    • SHA1

      fe582246792774c2c9dd15639ffa0aca90d6fd0b

    • SHA256

      fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

    • SHA512

      0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

    • SSDEEP

      192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks