Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

de2fc3969a...42.exe

windows7-x64

10

de2fc3969a...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de2fc3969ad536e51215ad695158238f5d3545036db91acdc05125142271f342

  • Size

    408KB

  • Sample

    221020-cy1s9aaee5

  • MD5

    804f7e1c7072cd940b6ac38d1a791e90

  • SHA1

    4a8462e2902e553a42092dc4edff02c65a04324e

  • SHA256

    de2fc3969ad536e51215ad695158238f5d3545036db91acdc05125142271f342

  • SHA512

    31cf51cdd08f602a7fad1c6715b6f17aa9a3fa2292d14fbd5e21504a9806e9d19eed0578267359b69cba6044d4a87b00a4071c56766eca311eb69a3769877100

  • SSDEEP

    6144:p7ouwAH+MCsrXzhFQqgpfevouIJpIMJN/9:pzwAdCsXhFi/HVR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      de2fc3969ad536e51215ad695158238f5d3545036db91acdc05125142271f342

    • Size

      408KB

    • MD5

      804f7e1c7072cd940b6ac38d1a791e90

    • SHA1

      4a8462e2902e553a42092dc4edff02c65a04324e

    • SHA256

      de2fc3969ad536e51215ad695158238f5d3545036db91acdc05125142271f342

    • SHA512

      31cf51cdd08f602a7fad1c6715b6f17aa9a3fa2292d14fbd5e21504a9806e9d19eed0578267359b69cba6044d4a87b00a4071c56766eca311eb69a3769877100

    • SSDEEP

      6144:p7ouwAH+MCsrXzhFQqgpfevouIJpIMJN/9:pzwAdCsXhFi/HVR

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks