Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

KONTRAKT-pdf.exe

windows7-x64

10

KONTRAKT-pdf.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27032025_0110_26032025_KONTRAKT-pdf.img

  • Size

    1.4MB

  • Sample

    250327-bjmseavzbt

  • MD5

    447f357958f5ca1e68c9e262f016f05f

  • SHA1

    a01492ddbf6103d2939b0dde8505b9a662776e21

  • SHA256

    c0518a5a62f316bc4596f1270f9e8fd07fec9204266e4657e7c7c6d93613f801

  • SHA512

    8721067538fa023af478b4fba51f0c0538a21310e6f91fcbbbb81f552bb26f27d51db73e1f9c36149c2f96fe410f3a49b848daa4f2ddf59138aecca0900e164c

  • SSDEEP

    24576:kdYBcYrRLg2AYpsmF0tlrluJzu5IOImYGyFGAUoTJTvuhyR:kqcYrRLgEUlrAyaO7dyFGAHFvsyR

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      KONTRAKT-pdf.bat

    • Size

      831KB

    • MD5

      b0c7ab10be42ea7a840c7f51b1c95f81

    • SHA1

      532dd15c1086b8d2af0ee678797282742385558e

    • SHA256

      e9887c4fd1a66a2c7efaf6c7cb52765b4368a8cbb225df248f2fddc6d20f378b

    • SHA512

      475a90ccbc57d0ae08f9a1a19a6a0a9c13175712512eaa2895b905feeced64446f74951afd1760d61c0e62d82d8b056b5e95532ea49395c72a14bc729187f072

    • SSDEEP

      24576:mdYBcYrRLg2AYpsmF0tlrluJzu5IOImYGyFGAUoTJTvuhyR:mqcYrRLgEUlrAyaO7dyFGAHFvsyR

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks