Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3dafbf5e6f...02.exe

windows7-x64

8

3dafbf5e6f...02.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902

  • Size

    399KB

  • Sample

    221123-yn7dyaaf74

  • MD5

    26a0916bad2656e393c961d9ca4e66c3

  • SHA1

    f0e76ce5081fba1a00291491bee120c7e8b4c492

  • SHA256

    3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902

  • SHA512

    4662d9ad3ec26f85207c05fa7c5f10467be92b40e17be0e9c560263b3a4808c4d5ee6a015a9e04cb51f7712b1f7b6bb3c01d3a48e4557aa592adfa1fb9836cb6

  • SSDEEP

    6144:2wFB0iQ/M0hPoV0z1MN9S6a8yuZsVYqmxsqZJlfRaShWuhPAfba4PLpg/5927x:L0ih2oOW9HvZsOqTafZauUf+4DO32

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902

    • Size

      399KB

    • MD5

      26a0916bad2656e393c961d9ca4e66c3

    • SHA1

      f0e76ce5081fba1a00291491bee120c7e8b4c492

    • SHA256

      3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902

    • SHA512

      4662d9ad3ec26f85207c05fa7c5f10467be92b40e17be0e9c560263b3a4808c4d5ee6a015a9e04cb51f7712b1f7b6bb3c01d3a48e4557aa592adfa1fb9836cb6

    • SSDEEP

      6144:2wFB0iQ/M0hPoV0z1MN9S6a8yuZsVYqmxsqZJlfRaShWuhPAfba4PLpg/5927x:L0ih2oOW9HvZsOqTafZauUf+4DO32

    Score
    8/10
    evasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks