Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

e85bc7142b...53.exe

windows7-x64

6

e85bc7142b...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e85bc7142bdb0c9bd45cfd9fb842ff0d7b3ba6fecfa147e4d24a75ba35ea7053

  • Size

    72KB

  • Sample

    221011-gvjssahea3

  • MD5

    4e76b18c930d83e9f25e4fd573eb2cc0

  • SHA1

    4df0bc374d6f82e7d290d8cdc0d985c3defcdf4a

  • SHA256

    e85bc7142bdb0c9bd45cfd9fb842ff0d7b3ba6fecfa147e4d24a75ba35ea7053

  • SHA512

    8ecbc41a4538ccd6efb12ed85ff89ff0c02ea93428c81f29a80b4f8afff5ff637380325b4a0725689d683727ac2513c313075ec2efc54ed6e8ea0ec6cd13bdf4

  • SSDEEP

    1536:tZfKyI9J2LJ3Jh991P6pX+QCXfUfCwhHhCEKHl63QkUErRgARyWxcKisKldUk:K9J2LJ3Jh9ypXDCXfUfCwhvilJkXrRgF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e85bc7142bdb0c9bd45cfd9fb842ff0d7b3ba6fecfa147e4d24a75ba35ea7053

    • Size

      72KB

    • MD5

      4e76b18c930d83e9f25e4fd573eb2cc0

    • SHA1

      4df0bc374d6f82e7d290d8cdc0d985c3defcdf4a

    • SHA256

      e85bc7142bdb0c9bd45cfd9fb842ff0d7b3ba6fecfa147e4d24a75ba35ea7053

    • SHA512

      8ecbc41a4538ccd6efb12ed85ff89ff0c02ea93428c81f29a80b4f8afff5ff637380325b4a0725689d683727ac2513c313075ec2efc54ed6e8ea0ec6cd13bdf4

    • SSDEEP

      1536:tZfKyI9J2LJ3Jh991P6pX+QCXfUfCwhHhCEKHl63QkUErRgARyWxcKisKldUk:K9J2LJ3Jh9ypXDCXfUfCwhvilJkXrRgF

    Score
    10/10
    persistenceevasion

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks