Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

b6ec88e783...7a.exe

windows7-x64

7

b6ec88e783...7a.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6ec88e783ae2ca38088944f15063c6c9dcdd7954de8227f3c724e860e87437a.exe

  • Size

    683KB

  • Sample

    240214-geq7xsae81

  • MD5

    b0e4c2172afcdb89e7cb65ad3dfb7145

  • SHA1

    19580c0f3b97602d93094fd1eb8fd27579e9d17e

  • SHA256

    b6ec88e783ae2ca38088944f15063c6c9dcdd7954de8227f3c724e860e87437a

  • SHA512

    c4c6e3e3999ec7780696a22066906ac7b672136f480502a64c955098024620d1e694b9018377521780c668cf26c2dc36f4e82fc8ee808f1432c37938c2c7c93a

  • SSDEEP

    12288:PK5yuMYwM2t2t14FNHXsE59stFbfw7V3+HlLwxOiMCyINCK:C5XMYwM2t20p8E5ObSuHlLhlIkK

Score
7/10
persistence

Malware Config

Targets

    • Target

      b6ec88e783ae2ca38088944f15063c6c9dcdd7954de8227f3c724e860e87437a.exe

    • Size

      683KB

    • MD5

      b0e4c2172afcdb89e7cb65ad3dfb7145

    • SHA1

      19580c0f3b97602d93094fd1eb8fd27579e9d17e

    • SHA256

      b6ec88e783ae2ca38088944f15063c6c9dcdd7954de8227f3c724e860e87437a

    • SHA512

      c4c6e3e3999ec7780696a22066906ac7b672136f480502a64c955098024620d1e694b9018377521780c668cf26c2dc36f4e82fc8ee808f1432c37938c2c7c93a

    • SSDEEP

      12288:PK5yuMYwM2t2t14FNHXsE59stFbfw7V3+HlLwxOiMCyINCK:C5XMYwM2t20p8E5ObSuHlLhlIkK

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks