Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2ca192ab34...90.exe

windows7-x64

10

2ca192ab34...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ca192ab34f7f0895d97fa9d3e16cc3f500572191c8305ef7ab3c79e98fd7990

  • Size

    2.6MB

  • Sample

    240908-y145catbpq

  • MD5

    97ed9515c06e15d615efdaaa7cd15cf9

  • SHA1

    29cfb415b9b439aab5e6e50b182cd77e217c79c0

  • SHA256

    2ca192ab34f7f0895d97fa9d3e16cc3f500572191c8305ef7ab3c79e98fd7990

  • SHA512

    4f4cb3b790cffe7b445cacb8ddaee7c044f4ba37f9b678dae93b5caea42e4e1b25330c1662f470ab236ce786ce11b3fac3c4b717462b946cf7ddf6db771f71ef

  • SSDEEP

    49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/J:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/J

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      2ca192ab34f7f0895d97fa9d3e16cc3f500572191c8305ef7ab3c79e98fd7990

    • Size

      2.6MB

    • MD5

      97ed9515c06e15d615efdaaa7cd15cf9

    • SHA1

      29cfb415b9b439aab5e6e50b182cd77e217c79c0

    • SHA256

      2ca192ab34f7f0895d97fa9d3e16cc3f500572191c8305ef7ab3c79e98fd7990

    • SHA512

      4f4cb3b790cffe7b445cacb8ddaee7c044f4ba37f9b678dae93b5caea42e4e1b25330c1662f470ab236ce786ce11b3fac3c4b717462b946cf7ddf6db771f71ef

    • SSDEEP

      49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/J:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/J

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks