Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c284d1179a...02.exe

windows7-x64

3

c284d1179a...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c284d1179a3a94398675fa702482ad196a06c8bbde7bcd1dc12af65d4c63c702

  • Size

    16KB

  • Sample

    241014-dxjn1sxcke

  • MD5

    0abb0a370539efc06f2858e2d752aa0f

  • SHA1

    abfc61b974c76340715e4ae3b44b969333bf2975

  • SHA256

    c284d1179a3a94398675fa702482ad196a06c8bbde7bcd1dc12af65d4c63c702

  • SHA512

    470e502dfb1e9df6fd76c334eaddfecff0d81798d2bf143e6b9879d61d8352cad30d9d97fe5eb85e9c44b076eff4d82345755906410cb3c9a8a24bb3f44b8d6b

  • SSDEEP

    96:alV/7aG0bHNtH8is0yJ79johIeA3qtiAg5r43w0vHzNt:ssN2isL3ohlA3qtiAiewUR

Score
10/10
collectiondiscoverypersistence

Malware Config

Targets

    • Target

      c284d1179a3a94398675fa702482ad196a06c8bbde7bcd1dc12af65d4c63c702

    • Size

      16KB

    • MD5

      0abb0a370539efc06f2858e2d752aa0f

    • SHA1

      abfc61b974c76340715e4ae3b44b969333bf2975

    • SHA256

      c284d1179a3a94398675fa702482ad196a06c8bbde7bcd1dc12af65d4c63c702

    • SHA512

      470e502dfb1e9df6fd76c334eaddfecff0d81798d2bf143e6b9879d61d8352cad30d9d97fe5eb85e9c44b076eff4d82345755906410cb3c9a8a24bb3f44b8d6b

    • SSDEEP

      96:alV/7aG0bHNtH8is0yJ79johIeA3qtiAg5r43w0vHzNt:ssN2isL3ohlA3qtiAiewUR

    Score
    10/10
    discoverycollectionpersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks