Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

4d5135f33e...f7.exe

windows7-x64

10

4d5135f33e...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d5135f33ec51bdf79fb42f10d121cb56e875d3277afd317749a4ce7dc5ec1f7

  • Size

    274KB

  • Sample

    221020-r5wkfaaaak

  • MD5

    902ad86abfbf7cbdd2aa5a8cac5853e0

  • SHA1

    324f07cfdc50272d935ac811814c63ae78d99569

  • SHA256

    4d5135f33ec51bdf79fb42f10d121cb56e875d3277afd317749a4ce7dc5ec1f7

  • SHA512

    8a4b8d98ac567187abcc57ed21270598e49ffca8fdb6540ab21afcdfa152e0153d4bb4624311dcd8b5592a4e7ec00a7fc9b93051d6b4254803d18ee846332831

  • SSDEEP

    3072:Gbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyAT:Gbl5RKgOGqml80FrgTRHGvJI08iY1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4d5135f33ec51bdf79fb42f10d121cb56e875d3277afd317749a4ce7dc5ec1f7

    • Size

      274KB

    • MD5

      902ad86abfbf7cbdd2aa5a8cac5853e0

    • SHA1

      324f07cfdc50272d935ac811814c63ae78d99569

    • SHA256

      4d5135f33ec51bdf79fb42f10d121cb56e875d3277afd317749a4ce7dc5ec1f7

    • SHA512

      8a4b8d98ac567187abcc57ed21270598e49ffca8fdb6540ab21afcdfa152e0153d4bb4624311dcd8b5592a4e7ec00a7fc9b93051d6b4254803d18ee846332831

    • SSDEEP

      3072:Gbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyAT:Gbl5RKgOGqml80FrgTRHGvJI08iY1

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks