Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c367c25212...4c.exe

windows7-x64

10

c367c25212...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c367c25212dcad569631aded689e2c6fb67f1a853a73ac13eb33aa9e36ef5e4c

  • Size

    741KB

  • Sample

    240707-dpwzdavbqa

  • MD5

    9c119f7c587b2f0a3dcc004835cc1f2d

  • SHA1

    a51180e0e088cf2e9d7817fad22b3013148ae051

  • SHA256

    c367c25212dcad569631aded689e2c6fb67f1a853a73ac13eb33aa9e36ef5e4c

  • SHA512

    f85e7d96db173812b8ad9e34a8228dfdeff2610b9fa7b87052ffaabf741fd21dcce46dd469b7541ec4fa73f1ea34272e6b7a197aee9be6206cd5583f204f0789

  • SSDEEP

    12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1F388888888K:lIt4kt0Kd6F6CNzYhUiEWEYcwP88888z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c367c25212dcad569631aded689e2c6fb67f1a853a73ac13eb33aa9e36ef5e4c

    • Size

      741KB

    • MD5

      9c119f7c587b2f0a3dcc004835cc1f2d

    • SHA1

      a51180e0e088cf2e9d7817fad22b3013148ae051

    • SHA256

      c367c25212dcad569631aded689e2c6fb67f1a853a73ac13eb33aa9e36ef5e4c

    • SHA512

      f85e7d96db173812b8ad9e34a8228dfdeff2610b9fa7b87052ffaabf741fd21dcce46dd469b7541ec4fa73f1ea34272e6b7a197aee9be6206cd5583f204f0789

    • SSDEEP

      12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1F388888888K:lIt4kt0Kd6F6CNzYhUiEWEYcwP88888z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks