Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

f47f3699ee...d5.exe

windows7-x64

10

f47f3699ee...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f47f3699ee867efe990a828976807824e93a87bfb8f06560fcb5cf94fc117cd5

  • Size

    1.5MB

  • Sample

    221123-1debhsfa28

  • MD5

    9ff10c88004862fa4f2073b3d539ab3b

  • SHA1

    afd4d00593cc951b5f6eba67f2aba1b4a020e6ea

  • SHA256

    f47f3699ee867efe990a828976807824e93a87bfb8f06560fcb5cf94fc117cd5

  • SHA512

    42d23148c24470796cfd2410f8a073260a370aedfd95aa4aaba961bedbd00b1d5b10e346bbdb5ffb80d77468054a4d337e843d1716fa5a305c7cf87552124cca

  • SSDEEP

    12288:gOSZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MvBZbOuD6:4b5MPb5MPb5MPb5MPb5MPb5MTbZu

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      f47f3699ee867efe990a828976807824e93a87bfb8f06560fcb5cf94fc117cd5

    • Size

      1.5MB

    • MD5

      9ff10c88004862fa4f2073b3d539ab3b

    • SHA1

      afd4d00593cc951b5f6eba67f2aba1b4a020e6ea

    • SHA256

      f47f3699ee867efe990a828976807824e93a87bfb8f06560fcb5cf94fc117cd5

    • SHA512

      42d23148c24470796cfd2410f8a073260a370aedfd95aa4aaba961bedbd00b1d5b10e346bbdb5ffb80d77468054a4d337e843d1716fa5a305c7cf87552124cca

    • SSDEEP

      12288:gOSZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MwO5ZOa5MvBZbOuD6:4b5MPb5MPb5MPb5MPb5MPb5MTbZu

    Score
    10/10
    evasionpersistenceupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks