Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

CAAAAFBKFI.exe

windows7-x64

10

CAAAAFBKFI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CAAAAFBKFI.exe

  • Size

    2.7MB

  • Sample

    250222-w7qt7avmhy

  • MD5

    62f9ab4067af92388be75b2cf9956e20

  • SHA1

    3f9040c33118341edb168689ad852f1cddd0309e

  • SHA256

    c980444331ca7db229839e93c88dded4001943f0b71ec00d41f6ad3e76f5afb9

  • SHA512

    47d881354cb8a99c54d8d92aea277d3c3d20508659378628aa9e606509e9ce8697214f0c00636d3f580d20cb6dab6b73e565cfbbd5dfb73201a7d43a9c7a4361

  • SSDEEP

    49152:NamswIRUiME1+bu5kfl9KYhm8vKy/VLmtrShqFatM7XZhak:YmQ288iy9LxhQD7XZha

Score
10/10
hijackloaderdiscoveryloader

Malware Config

Targets

    • Target

      CAAAAFBKFI.exe

    • Size

      2.7MB

    • MD5

      62f9ab4067af92388be75b2cf9956e20

    • SHA1

      3f9040c33118341edb168689ad852f1cddd0309e

    • SHA256

      c980444331ca7db229839e93c88dded4001943f0b71ec00d41f6ad3e76f5afb9

    • SHA512

      47d881354cb8a99c54d8d92aea277d3c3d20508659378628aa9e606509e9ce8697214f0c00636d3f580d20cb6dab6b73e565cfbbd5dfb73201a7d43a9c7a4361

    • SSDEEP

      49152:NamswIRUiME1+bu5kfl9KYhm8vKy/VLmtrShqFatM7XZhak:YmQ288iy9LxhQD7XZha

    Score
    10/10
    hijackloaderdiscoveryloader

    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

      loaderhijackloader

    • Hijackloader family

      hijackloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks