Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

d82922135a...13.exe

windows7-x64

9

d82922135a...13.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d82922135a671af6a69455ca22bae5a9da66e03f86aae14595a6824e3aa20213

  • Size

    426KB

  • Sample

    240510-d37yssgd9y

  • MD5

    a1b78be46fc7c6f022ae78c81393d401

  • SHA1

    349a453f73b70da9138197f2bf029613f2bf47d3

  • SHA256

    d82922135a671af6a69455ca22bae5a9da66e03f86aae14595a6824e3aa20213

  • SHA512

    7041ec4786212417b082f634ca785400a28a22165896078727567340d5dd0edcccfa54172e8d4dc2e39a5e95f5dda49d28c6ed76999c0c33348af697384c7330

  • SSDEEP

    12288:BgwD2w6IRnN6SJWGiT1IpRrfW3WOvduhmxcLX/M9Uu+B7cbN:J2V1ymxcEUuj

Score
9/10
persistence

Malware Config

Targets

    • Target

      d82922135a671af6a69455ca22bae5a9da66e03f86aae14595a6824e3aa20213

    • Size

      426KB

    • MD5

      a1b78be46fc7c6f022ae78c81393d401

    • SHA1

      349a453f73b70da9138197f2bf029613f2bf47d3

    • SHA256

      d82922135a671af6a69455ca22bae5a9da66e03f86aae14595a6824e3aa20213

    • SHA512

      7041ec4786212417b082f634ca785400a28a22165896078727567340d5dd0edcccfa54172e8d4dc2e39a5e95f5dda49d28c6ed76999c0c33348af697384c7330

    • SSDEEP

      12288:BgwD2w6IRnN6SJWGiT1IpRrfW3WOvduhmxcLX/M9Uu+B7cbN:J2V1ymxcEUuj

    Score
    9/10
    persistence

    • Detects executables (downlaoders) containing URLs to raw contents of a paste

    • Detects executables referencing many IR and analysis tools

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks