Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

x4Shellcode.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x4Shellcode.exe

  • Size

    164KB

  • Sample

    240703-xccvhssepn

  • MD5

    8a7bee2c8cec6ac50bc42fe03d3231e6

  • SHA1

    ebc599a15f061a70f6b3ee74b9acfa4e3b4d299d

  • SHA256

    c8139f7fcde9c68cd331bcd438dfea7f02c463c6372dc477ab305da518483db8

  • SHA512

    34370b6f162cb752b1cb91d689705e6f0f247e02744bbbe85347d20cd89e02aba7c5e9e22bb63acc49b4fdc062de12ccf24f481a18c18d2094e1506bb143cad5

  • SSDEEP

    3072:CQpsC8VjDaGrEALtYwR4XiLqejJ3cW4biLsOLQGf1JgckNYhy0kJ:CQpsC8VjD9EAP46sBiHbeVW

Score
10/10

Malware Config

Targets

    • Target

      x4Shellcode.exe

    • Size

      164KB

    • MD5

      8a7bee2c8cec6ac50bc42fe03d3231e6

    • SHA1

      ebc599a15f061a70f6b3ee74b9acfa4e3b4d299d

    • SHA256

      c8139f7fcde9c68cd331bcd438dfea7f02c463c6372dc477ab305da518483db8

    • SHA512

      34370b6f162cb752b1cb91d689705e6f0f247e02744bbbe85347d20cd89e02aba7c5e9e22bb63acc49b4fdc062de12ccf24f481a18c18d2094e1506bb143cad5

    • SSDEEP

      3072:CQpsC8VjDaGrEALtYwR4XiLqejJ3cW4biLsOLQGf1JgckNYhy0kJ:CQpsC8VjD9EAP46sBiHbeVW

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks