Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

2d8060ea7c...41.exe

windows7-x64

10

2d8060ea7c...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d8060ea7c69f769626a8643876facef34f5cebb67bd095a69a9aa2d765cd641

  • Size

    603KB

  • Sample

    221028-xac3haafb8

  • MD5

    0ab7db2b722745fed1fb488794b7b7f1

  • SHA1

    5093acc1c04b7b0391a5bfd86dd84a1bacc267bc

  • SHA256

    2d8060ea7c69f769626a8643876facef34f5cebb67bd095a69a9aa2d765cd641

  • SHA512

    1dd39e496e89b242075ec19bc9a3a2bdec8cccac158eb159d463d9308f3e6dd75978b1378d98bb813d2c6b7b8cc715fab68e7c15f5134850b1fe9f8c75c2f1d1

  • SSDEEP

    12288:e3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OWI:oDsj1dEcBcJ9nPx/igrpI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2d8060ea7c69f769626a8643876facef34f5cebb67bd095a69a9aa2d765cd641

    • Size

      603KB

    • MD5

      0ab7db2b722745fed1fb488794b7b7f1

    • SHA1

      5093acc1c04b7b0391a5bfd86dd84a1bacc267bc

    • SHA256

      2d8060ea7c69f769626a8643876facef34f5cebb67bd095a69a9aa2d765cd641

    • SHA512

      1dd39e496e89b242075ec19bc9a3a2bdec8cccac158eb159d463d9308f3e6dd75978b1378d98bb813d2c6b7b8cc715fab68e7c15f5134850b1fe9f8c75c2f1d1

    • SSDEEP

      12288:e3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OWI:oDsj1dEcBcJ9nPx/igrpI

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks