Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

5

SN250123AA...xx.exe

windows7-x64

6

SN250123AA...xx.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SN250123AAAME-000079_74f771332263871a8c11d4916a744be265b87e14c64ebacc570fdcd6eadeede0xx

  • Size

    1.3MB

  • Sample

    250328-bn2r5azyfz

  • MD5

    17ec136918960645745dd2e576d4759d

  • SHA1

    387e143066504ba543604439c1ceb602d00a024f

  • SHA256

    74f771332263871a8c11d4916a744be265b87e14c64ebacc570fdcd6eadeede0

  • SHA512

    b4599125070e329cd7fbdbdc12386fdaa40b2576e567513ca1fd03d15e806853512d0812ef50cbdc100333720a6ea9f9eb99d267f75edadc6265ee4d0f06177d

  • SSDEEP

    24576:Jtb20pkaCqT5TBWgNQ7aReVCtGT0o5xjTmYGjon6Zwv//6A:aVg5tQ7aR0Lxssn6Zwv5

Score
6/10
collectiondiscovery

Malware Config

Targets

    • Target

      SN250123AAAME-000079_74f771332263871a8c11d4916a744be265b87e14c64ebacc570fdcd6eadeede0xx

    • Size

      1.3MB

    • MD5

      17ec136918960645745dd2e576d4759d

    • SHA1

      387e143066504ba543604439c1ceb602d00a024f

    • SHA256

      74f771332263871a8c11d4916a744be265b87e14c64ebacc570fdcd6eadeede0

    • SHA512

      b4599125070e329cd7fbdbdc12386fdaa40b2576e567513ca1fd03d15e806853512d0812ef50cbdc100333720a6ea9f9eb99d267f75edadc6265ee4d0f06177d

    • SSDEEP

      24576:Jtb20pkaCqT5TBWgNQ7aReVCtGT0o5xjTmYGjon6Zwv//6A:aVg5tQ7aR0Lxssn6Zwv5

    Score
    6/10
    collectiondiscovery

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks