Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

9415ff1c1d...af.exe

windows7-x64

10

9415ff1c1d...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9415ff1c1d575d46a4e02ab3b1f5bea62ccecf88861fe2170ea63bf81852daaf

  • Size

    1.0MB

  • Sample

    221029-jpr83sgbh2

  • MD5

    b5c6b6abfc3a9a5da6c896fa2ed2d34a

  • SHA1

    217da304216050ae23c1915d585672ee039994ed

  • SHA256

    9415ff1c1d575d46a4e02ab3b1f5bea62ccecf88861fe2170ea63bf81852daaf

  • SHA512

    2d2a603247552891c696c9a592959650d4f0b883c95505b5af02627fd431ed6183f5dfd8f51b3a922f1a3427a09e6b5fa531cd7a7705efadba7ef0632b9eb703

  • SSDEEP

    24576:EeZJ8NI8DerQZb+md4wmPBTQeN/7DSBfWho:Z8DerQZbd2rBTph7GBfW+

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      9415ff1c1d575d46a4e02ab3b1f5bea62ccecf88861fe2170ea63bf81852daaf

    • Size

      1.0MB

    • MD5

      b5c6b6abfc3a9a5da6c896fa2ed2d34a

    • SHA1

      217da304216050ae23c1915d585672ee039994ed

    • SHA256

      9415ff1c1d575d46a4e02ab3b1f5bea62ccecf88861fe2170ea63bf81852daaf

    • SHA512

      2d2a603247552891c696c9a592959650d4f0b883c95505b5af02627fd431ed6183f5dfd8f51b3a922f1a3427a09e6b5fa531cd7a7705efadba7ef0632b9eb703

    • SSDEEP

      24576:EeZJ8NI8DerQZb+md4wmPBTQeN/7DSBfWho:Z8DerQZbd2rBTph7GBfW+

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks