Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

91c414d0f1...ac.exe

windows7-x64

7

91c414d0f1...ac.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91c414d0f1a677d6d3bd7d890300720a57404a0c943ed99562f93ae7ac9098ac

  • Size

    861KB

  • Sample

    221003-dz2ydaebd6

  • MD5

    68636da56c83715de2290164bcf756b0

  • SHA1

    5db1c14809b1573a7ee7625db8e8cb23c02f8983

  • SHA256

    91c414d0f1a677d6d3bd7d890300720a57404a0c943ed99562f93ae7ac9098ac

  • SHA512

    a006f38b32e7ad671264f4317c2f7293a78826cce5a937b893dc1466af8be3ae67032a7b89ce144768c1a5a32abe355a5fb7b2f9a96b42f3fcdb3387a121f098

  • SSDEEP

    24576:MRmJkcoQricOIQxiZY1iaC3bqaR5/cT0hO:ZJZoQrbTFZY1iaCNQ

Score
7/10
persistence

Malware Config

Targets

    • Target

      91c414d0f1a677d6d3bd7d890300720a57404a0c943ed99562f93ae7ac9098ac

    • Size

      861KB

    • MD5

      68636da56c83715de2290164bcf756b0

    • SHA1

      5db1c14809b1573a7ee7625db8e8cb23c02f8983

    • SHA256

      91c414d0f1a677d6d3bd7d890300720a57404a0c943ed99562f93ae7ac9098ac

    • SHA512

      a006f38b32e7ad671264f4317c2f7293a78826cce5a937b893dc1466af8be3ae67032a7b89ce144768c1a5a32abe355a5fb7b2f9a96b42f3fcdb3387a121f098

    • SSDEEP

      24576:MRmJkcoQricOIQxiZY1iaC3bqaR5/cT0hO:ZJZoQrbTFZY1iaCNQ

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks