f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

f5064cd6cc...1b.exe

windows7-x64

f5064cd6cc...1b.exe

windows10-2004-x64

3

Sharing

General

Target

f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b
Size

444KB
Sample

221106-etsyyscae6
MD5

2219cc9eedaa0cccf7885f9b350764e6
SHA1

2218073170e783ddeb703bf11e59acf423049f2f
SHA256

f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b
SHA512

b252a43dc4b1ffc9cdececd04410a0c8c2f87c3e1fb27671f8305bf42b4003e1ff2aa1c9f300d031d5277f222a2fb47baca690dfdf613d5cc349889bae293421
SSDEEP

6144:TO32QTZdUgyqS8VmA7iNog9KyW9syrjU3caZnD8zAmCjgIyp+EA1:T8ldy980OWNKyW9sWARZDCYey

Score

10^/10

evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b.exe

Resource

win7-20220901-en

evasion persistence trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b
- Size
  
  444KB
- MD5
  
  2219cc9eedaa0cccf7885f9b350764e6
- SHA1
  
  2218073170e783ddeb703bf11e59acf423049f2f
- SHA256
  
  f5064cd6cca093a1a88c558b807dcde617e8e71e805d67db12b4db09cc54a01b
- SHA512
  
  b252a43dc4b1ffc9cdececd04410a0c8c2f87c3e1fb27671f8305bf42b4003e1ff2aa1c9f300d031d5277f222a2fb47baca690dfdf613d5cc349889bae293421
- SSDEEP
  
  6144:TO32QTZdUgyqS8VmA7iNog9KyW9syrjU3caZnD8zAmCjgIyp+EA1:T8ldy980OWNKyW9sWARZDCYey
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.