Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

7aab64ca1e...05.exe

windows7-x64

9

7aab64ca1e...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7aab64ca1ee768d93c0bb3356adeab4a94047803658c8637fd6633a78faf2e05

  • Size

    240KB

  • Sample

    221011-2bzecahbbl

  • MD5

    578b9aae50bab93d90e070f0f23a3cc0

  • SHA1

    2bb4404ce1571eb1a9779edbc02c75e6d4d580a7

  • SHA256

    7aab64ca1ee768d93c0bb3356adeab4a94047803658c8637fd6633a78faf2e05

  • SHA512

    494889012ba1f52c41ff09f85c1e5c5b8a076f8045a04ad3e5494c7c3eb15607e95cb197edb50f355a26595f48abb09b243cabd42e655cc0e9cfa3d4b0beff63

  • SSDEEP

    6144:mshXJafH0aiKuXxR9arh56NNOxvLHkAWUgybKvgpRiAdJSpERxuXooTZ23GIg:m0ctiKuXxR9uOOHmSRimSpERKF23G

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      7aab64ca1ee768d93c0bb3356adeab4a94047803658c8637fd6633a78faf2e05

    • Size

      240KB

    • MD5

      578b9aae50bab93d90e070f0f23a3cc0

    • SHA1

      2bb4404ce1571eb1a9779edbc02c75e6d4d580a7

    • SHA256

      7aab64ca1ee768d93c0bb3356adeab4a94047803658c8637fd6633a78faf2e05

    • SHA512

      494889012ba1f52c41ff09f85c1e5c5b8a076f8045a04ad3e5494c7c3eb15607e95cb197edb50f355a26595f48abb09b243cabd42e655cc0e9cfa3d4b0beff63

    • SSDEEP

      6144:mshXJafH0aiKuXxR9arh56NNOxvLHkAWUgybKvgpRiAdJSpERxuXooTZ23GIg:m0ctiKuXxR9uOOHmSRimSpERKF23G

    Score
    10/10
    persistenceupxevasion

    • Modifies firewall policy service

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks