Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a35db4dfd6...bb.exe

windows7-x64

10

a35db4dfd6...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a35db4dfd6864817665b9638ee3770ad04f5d3d3aa897b2774740f140dc3b7bb

  • Size

    71KB

  • Sample

    221124-awq5xsag2v

  • MD5

    27224fad054089ffb44416232c299020

  • SHA1

    54cf6a7b503eccd5d5d78ef8eca4c33b9767eefc

  • SHA256

    a35db4dfd6864817665b9638ee3770ad04f5d3d3aa897b2774740f140dc3b7bb

  • SHA512

    f8c80552a7e9c5aa369a0cec3e56b446ab4a15a0bf7f29eea83439977b975d8edbcf7418b1fc96407410f9e5c94add504b2d51ebbe954035df38e93058bb15a7

  • SSDEEP

    1536:QKuOXR2esnjlRTN3FzJnPOT1X4ZwFc3pL+l8/s:DuOXR2NjjfJnEiZPM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a35db4dfd6864817665b9638ee3770ad04f5d3d3aa897b2774740f140dc3b7bb

    • Size

      71KB

    • MD5

      27224fad054089ffb44416232c299020

    • SHA1

      54cf6a7b503eccd5d5d78ef8eca4c33b9767eefc

    • SHA256

      a35db4dfd6864817665b9638ee3770ad04f5d3d3aa897b2774740f140dc3b7bb

    • SHA512

      f8c80552a7e9c5aa369a0cec3e56b446ab4a15a0bf7f29eea83439977b975d8edbcf7418b1fc96407410f9e5c94add504b2d51ebbe954035df38e93058bb15a7

    • SSDEEP

      1536:QKuOXR2esnjlRTN3FzJnPOT1X4ZwFc3pL+l8/s:DuOXR2NjjfJnEiZPM

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.