Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

aa2e228f48...61.exe

windows7-x64

10

aa2e228f48...61.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661

  • Size

    251KB

  • Sample

    221014-mds8sabac6

  • MD5

    60b2925422fa61fa31a1b313041a6ff5

  • SHA1

    d4d3a09b41ee89a62a38d24c85b683fdf53649be

  • SHA256

    aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661

  • SHA512

    f1fc26c8d9023add3508c3ca1f6a7031aa3166cf30b8665d1beca4780266285eec7973508f443c2125873eaebe6a9c501160d7c29df9b39bc4f6f67a18039318

  • SSDEEP

    6144:KMJR7WBTsZ9/5JFnjWsUQQqM/nSfmiO9RukRaxLDwcw5/xTxqCdyEjQb4FLH+JXY:KRFmhJBj1UQQqM/nSfmiO9RfRa2VzyED

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661

    • Size

      251KB

    • MD5

      60b2925422fa61fa31a1b313041a6ff5

    • SHA1

      d4d3a09b41ee89a62a38d24c85b683fdf53649be

    • SHA256

      aa2e228f4866bb804f5389c43a4ee34605a6f800fb7e53deb83579a1d4949661

    • SHA512

      f1fc26c8d9023add3508c3ca1f6a7031aa3166cf30b8665d1beca4780266285eec7973508f443c2125873eaebe6a9c501160d7c29df9b39bc4f6f67a18039318

    • SSDEEP

      6144:KMJR7WBTsZ9/5JFnjWsUQQqM/nSfmiO9RukRaxLDwcw5/xTxqCdyEjQb4FLH+JXY:KRFmhJBj1UQQqM/nSfmiO9RfRa2VzyED

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks