Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

FIRM ORDER...in.exe

windows7_x64

6

FIRM ORDER...in.exe

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FIRM ORDER _ 2020-1-32410 21981XMH.bin

  • Size

    1.8MB

  • Sample

    200707-f5vs8cpasx

  • MD5

    3349ba62142880bbe6e35dd4a9be5981

  • SHA1

    f53307dd3ea7e7dfeba1dbd6aa33ffabb3aed628

  • SHA256

    fae5d87e8771f0025e306697f68afe511275e9772af23dfd081ffbfc0b56f38d

  • SHA512

    1dad489fe6ef0d0f99358be688885e10ce2d178b675300e51eff3b169b9952c36e74868d5c8e77388c1ec2c7af895b10e65f21489416caa89de59e746b0a8c37

Score
6/10
persistence

Malware Config

Targets

    • Target

      FIRM ORDER _ 2020-1-32410 21981XMH.bin

    • Size

      1.8MB

    • MD5

      3349ba62142880bbe6e35dd4a9be5981

    • SHA1

      f53307dd3ea7e7dfeba1dbd6aa33ffabb3aed628

    • SHA256

      fae5d87e8771f0025e306697f68afe511275e9772af23dfd081ffbfc0b56f38d

    • SHA512

      1dad489fe6ef0d0f99358be688885e10ce2d178b675300e51eff3b169b9952c36e74868d5c8e77388c1ec2c7af895b10e65f21489416caa89de59e746b0a8c37

    Score
    6/10
    persistence

    • Adds Run entry to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks