Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

9f33ff385c...7f.exe

windows7-x64

10

9f33ff385c...7f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f

  • Size

    145KB

  • Sample

    221001-2b7qqaaae2

  • MD5

    67e83f630b500efa98813545b22e54ec

  • SHA1

    e7e1d8e199d126a3fd3131b2ba8d7f97b2e24591

  • SHA256

    9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f

  • SHA512

    01a7be00ec350196b8722df2ecb498980240614e45854bb46128f1173352a26a57636db2f4f784861f2c75de745c098c8c32fc8d2df4c056d37454789dd23d04

  • SSDEEP

    3072:My4EaMs3jcx3y5ao3DEEj8s8a0hE/uyoXEkfuTfvQYNlQWZmENuFjw61AI:Mfxt3Q35Ej83XQgYRuN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f

    • Size

      145KB

    • MD5

      67e83f630b500efa98813545b22e54ec

    • SHA1

      e7e1d8e199d126a3fd3131b2ba8d7f97b2e24591

    • SHA256

      9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f

    • SHA512

      01a7be00ec350196b8722df2ecb498980240614e45854bb46128f1173352a26a57636db2f4f784861f2c75de745c098c8c32fc8d2df4c056d37454789dd23d04

    • SSDEEP

      3072:My4EaMs3jcx3y5ao3DEEj8s8a0hE/uyoXEkfuTfvQYNlQWZmENuFjw61AI:Mfxt3Q35Ej83XQgYRuN

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Sets service image path in registry

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks