Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

e9df3f83ba...e4.exe

windows7-x64

8

e9df3f83ba...e4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9df3f83ba7ced62c6646240c0f810d4d0d1c48c2294ee5397c8082f7e1994e4

  • Size

    860KB

  • Sample

    221019-qhf1sshcf5

  • MD5

    a18ae764514efd206b779bdc7c522b6c

  • SHA1

    c24273454e7d1ab4162d78c64c73b77155caa37f

  • SHA256

    e9df3f83ba7ced62c6646240c0f810d4d0d1c48c2294ee5397c8082f7e1994e4

  • SHA512

    8f95712b9ae2243f945c1f570de140fbdf1d9ddc10468973010eabe1a179b3c4c2aa8d23f0798a0239e7bf04d614c4935b884e0c2a8fa76a50c0a68b83582ce5

  • SSDEEP

    12288:4gdLZ77GT7GmYRpuEcutuFY1hGoksq6iTZaAZaWZSZvd9ZEAPRzaO2J5KLY9QRsf:4gLGTpo9qlBAP66ZDGUC

Score
8/10

Malware Config

Targets

    • Target

      e9df3f83ba7ced62c6646240c0f810d4d0d1c48c2294ee5397c8082f7e1994e4

    • Size

      860KB

    • MD5

      a18ae764514efd206b779bdc7c522b6c

    • SHA1

      c24273454e7d1ab4162d78c64c73b77155caa37f

    • SHA256

      e9df3f83ba7ced62c6646240c0f810d4d0d1c48c2294ee5397c8082f7e1994e4

    • SHA512

      8f95712b9ae2243f945c1f570de140fbdf1d9ddc10468973010eabe1a179b3c4c2aa8d23f0798a0239e7bf04d614c4935b884e0c2a8fa76a50c0a68b83582ce5

    • SSDEEP

      12288:4gdLZ77GT7GmYRpuEcutuFY1hGoksq6iTZaAZaWZSZvd9ZEAPRzaO2J5KLY9QRsf:4gLGTpo9qlBAP66ZDGUC

    Score
    8/10

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks