Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

7671aa49c3...06.exe

windows7-x64

7671aa49c3...06.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06.exe

  • Size

    729KB

  • Sample

    250326-m1apysssas

  • MD5

    0ecb0490b99e9edc4a212c68e747a89c

  • SHA1

    8ffc7b16ca6f35a93b36decf433a8e32f4c0cbd6

  • SHA256

    7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06

  • SHA512

    6b498f10fdd9c4e6f722a8c42731da231e6d8698c5cb0c86489d50b69fa561a43af2d25dc8087ed2e10fa64214c2c7172eed368e9eb260c089084406db56670a

  • SSDEEP

    12288:K/fYDzo3gOSqyRbhkIGh28mZXXfyTN+NFbl5Pj0spM86:+fGUIGABFGMzxjJ

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06.exe

    • Size

      729KB

    • MD5

      0ecb0490b99e9edc4a212c68e747a89c

    • SHA1

      8ffc7b16ca6f35a93b36decf433a8e32f4c0cbd6

    • SHA256

      7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06

    • SHA512

      6b498f10fdd9c4e6f722a8c42731da231e6d8698c5cb0c86489d50b69fa561a43af2d25dc8087ed2e10fa64214c2c7172eed368e9eb260c089084406db56670a

    • SSDEEP

      12288:K/fYDzo3gOSqyRbhkIGh28mZXXfyTN+NFbl5Pj0spM86:+fGUIGABFGMzxjJ

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8b3830b9dbf87f84ddd3b26645fed3a0

    • SHA1

      223bef1f19e644a610a0877d01eadc9e28299509

    • SHA256

      f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37

    • SHA512

      d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03

    • SSDEEP

      192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks