Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

d32e408d4a...a0.exe

windows7-x64

7

d32e408d4a...a0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d32e408d4a112a7f5e468c6563e2f5393e970e39124a562222c3c31384c478a0

  • Size

    12KB

  • Sample

    221123-3fc8cacc72

  • MD5

    525ce41afec3272aa714e904991d49a0

  • SHA1

    be295ae605c94042db87faec291415e46d34f2a5

  • SHA256

    d32e408d4a112a7f5e468c6563e2f5393e970e39124a562222c3c31384c478a0

  • SHA512

    09cfeb3628a15f7ecb410a8a554c0885c049cee464466ca866d6c2cfb1c4975e6e4bbb6aa0294935edfe99b3f3f219f54ea3b0ae36a73ddb31680cae1f9c933f

  • SSDEEP

    96:4b6Hbg/W9mua81KzuaocoFM9er+usn5A9/T0cvpYbPbAPj:lb+W9m381muaMM9erM52b3veDAPj

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      d32e408d4a112a7f5e468c6563e2f5393e970e39124a562222c3c31384c478a0

    • Size

      12KB

    • MD5

      525ce41afec3272aa714e904991d49a0

    • SHA1

      be295ae605c94042db87faec291415e46d34f2a5

    • SHA256

      d32e408d4a112a7f5e468c6563e2f5393e970e39124a562222c3c31384c478a0

    • SHA512

      09cfeb3628a15f7ecb410a8a554c0885c049cee464466ca866d6c2cfb1c4975e6e4bbb6aa0294935edfe99b3f3f219f54ea3b0ae36a73ddb31680cae1f9c933f

    • SSDEEP

      96:4b6Hbg/W9mua81KzuaocoFM9er+usn5A9/T0cvpYbPbAPj:lb+W9m381muaMM9erM52b3veDAPj

    Score
    7/10
    discoverypersistence

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks