Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

70a9729398...19.exe

windows7-x64

6

70a9729398...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70a9729398a4acd0bbeb8a75eb62555cd8f509f3ac4e04338c62cdef3a8d0419.exe

  • Size

    978KB

  • Sample

    240829-b168daygjm

  • MD5

    6d9f3a386490c69c6d6a49a5d1b756a5

  • SHA1

    7c49c3a73e94674c803381cfd199e4f6bd9c7d60

  • SHA256

    70a9729398a4acd0bbeb8a75eb62555cd8f509f3ac4e04338c62cdef3a8d0419

  • SHA512

    2310deb2d92b94321fa4dd0aebe0c91bf93cb3915c74d6a3ee6b42bf7fa2846ba0f9e0cb70e60924fbcd073244c85e20bf9058c159cfd7a675f9481f59dd935a

  • SSDEEP

    24576:HZGtMXDHVI7ZsW2oXWWIAi0+NDP+k1HkT6vN72rgJ/n:HQc1QuW2gd+ddlN2cJv

Score
10/10
persistence

Malware Config

Targets

    • Target

      70a9729398a4acd0bbeb8a75eb62555cd8f509f3ac4e04338c62cdef3a8d0419.exe

    • Size

      978KB

    • MD5

      6d9f3a386490c69c6d6a49a5d1b756a5

    • SHA1

      7c49c3a73e94674c803381cfd199e4f6bd9c7d60

    • SHA256

      70a9729398a4acd0bbeb8a75eb62555cd8f509f3ac4e04338c62cdef3a8d0419

    • SHA512

      2310deb2d92b94321fa4dd0aebe0c91bf93cb3915c74d6a3ee6b42bf7fa2846ba0f9e0cb70e60924fbcd073244c85e20bf9058c159cfd7a675f9481f59dd935a

    • SSDEEP

      24576:HZGtMXDHVI7ZsW2oXWWIAi0+NDP+k1HkT6vN72rgJ/n:HQc1QuW2gd+ddlN2cJv

    Score
    10/10
    persistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks