Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

db37ced8bc...0f.exe

windows7-x64

3

db37ced8bc...0f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db37ced8bcdbc873cfe11a02e07246a0ecdab2c9f3aa19dfba7cfdfe0bda000f

  • Size

    17KB

  • Sample

    221107-sj7agsdba8

  • MD5

    06f674637cfdc9f7834a01e6baf43656

  • SHA1

    f52856a11263140376e61363692204e4caddb5af

  • SHA256

    db37ced8bcdbc873cfe11a02e07246a0ecdab2c9f3aa19dfba7cfdfe0bda000f

  • SHA512

    f81d798108060530ed06ae1268351e9945839a3f5ffe2e639f93f7037106390ff300724eb838632db080eb45946261a3aff81a2a4bb8186465d379793d85557e

  • SSDEEP

    384:lXR6Rh3ztmrRjqpOgVvIvRjENNJkZSsP3Ns2LigCjS9iz:lXQRztm1NgdIdyXkYs62ij2A

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      db37ced8bcdbc873cfe11a02e07246a0ecdab2c9f3aa19dfba7cfdfe0bda000f

    • Size

      17KB

    • MD5

      06f674637cfdc9f7834a01e6baf43656

    • SHA1

      f52856a11263140376e61363692204e4caddb5af

    • SHA256

      db37ced8bcdbc873cfe11a02e07246a0ecdab2c9f3aa19dfba7cfdfe0bda000f

    • SHA512

      f81d798108060530ed06ae1268351e9945839a3f5ffe2e639f93f7037106390ff300724eb838632db080eb45946261a3aff81a2a4bb8186465d379793d85557e

    • SSDEEP

      384:lXR6Rh3ztmrRjqpOgVvIvRjENNJkZSsP3Ns2LigCjS9iz:lXQRztm1NgdIdyXkYs62ij2A

    Score
    8/10
    evasionpersistence

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks