d8fce9dd9c65ca143343f7711859a7cffc3c5e656a8b84108183fb769a12ed8b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

test.txt

windows11-21h2-x64

7

Resubmissions

11/03/2025, 15:04 UTC

250311-sfzq8swmt5 8

11/03/2025, 14:20 UTC

250311-rnmwzavmx7 8

11/03/2025, 13:45 UTC

250311-q2pr2svyby 8

10/03/2025, 19:09 UTC

250310-xtytbavzcs 8

10/03/2025, 19:01 UTC

250310-xplyysvxhz 8

10/03/2025, 18:29 UTC

250310-w42ghstps7 8

10/03/2025, 15:21 UTC

250310-srpqeazshz 4

10/03/2025, 14:53 UTC

250310-r9d6ysyxdv 8

10/03/2025, 14:46 UTC

250310-r5e8fsywes 6

09/03/2025, 18:14 UTC

250309-wvp25axvd1 10

Sharing

General

Target

test.txt
Size

18B
Sample

250202-stqeqazkbj
MD5

5b3f97d48c8751bd031b7ea53545bdb6
SHA1

88be3374c62f23406ec83bb11279f8423bd3f88d
SHA256

d8fce9dd9c65ca143343f7711859a7cffc3c5e656a8b84108183fb769a12ed8b
SHA512

ed2de1eec50310ced4bde8ef6ae4b7902920b007df7b6aeb200cfe9fcc0d36ef05af7526c4675be2feac52831668798d5fe3523175efad6f6549b30f30a0b5d6

Score

7^/10

discovery execution motw phishing

Static task

static1

Behavioral task

behavioral1

Sample

test.txt

Resource

win11-20241007-en

discovery execution motw phishing

windows11-21h2-x64

25 signatures

900 seconds

Malware Config

Targets

- Target
  
  test.txt
- Size
  
  18B
- MD5
  
  5b3f97d48c8751bd031b7ea53545bdb6
- SHA1
  
  88be3374c62f23406ec83bb11279f8423bd3f88d
- SHA256
  
  d8fce9dd9c65ca143343f7711859a7cffc3c5e656a8b84108183fb769a12ed8b
- SHA512
  
  ed2de1eec50310ced4bde8ef6ae4b7902920b007df7b6aeb200cfe9fcc0d36ef05af7526c4675be2feac52831668798d5fe3523175efad6f6549b30f30a0b5d6
Score

7^/10

discovery execution motw phishing
- Executes dropped EXE
- Loads dropped DLL
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionmotwphishing

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.