Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

71fb586f0e...88.exe

windows7-x64

6

71fb586f0e...88.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71fb586f0e58b5cfa268fe190430608f654d03a536bbec110ae130b32614c088

  • Size

    1.0MB

  • Sample

    220919-ly9wlafedq

  • MD5

    85b42a798d392d1d931d9db7c198fe49

  • SHA1

    626d30a62f34eef635fc7a8e1111e67572ea8855

  • SHA256

    71fb586f0e58b5cfa268fe190430608f654d03a536bbec110ae130b32614c088

  • SHA512

    f2e1054186d72bb2498e111d1fa693a4c33072e45b415707eb124e699a032a4fdd1fb81440200d339eb6834bba32551565f6c5427c24f54ca0e4848c6b1828c9

  • SSDEEP

    24576:gYQqgqzij3M+JvN/DRQAcWCF2BXvvUpxXEHSb5:gaT0csNbyHWCEBXvMb75

Score
8/10
persistence

Malware Config

Targets

    • Target

      71fb586f0e58b5cfa268fe190430608f654d03a536bbec110ae130b32614c088

    • Size

      1.0MB

    • MD5

      85b42a798d392d1d931d9db7c198fe49

    • SHA1

      626d30a62f34eef635fc7a8e1111e67572ea8855

    • SHA256

      71fb586f0e58b5cfa268fe190430608f654d03a536bbec110ae130b32614c088

    • SHA512

      f2e1054186d72bb2498e111d1fa693a4c33072e45b415707eb124e699a032a4fdd1fb81440200d339eb6834bba32551565f6c5427c24f54ca0e4848c6b1828c9

    • SSDEEP

      24576:gYQqgqzij3M+JvN/DRQAcWCF2BXvvUpxXEHSb5:gaT0csNbyHWCEBXvMb75

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks