Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

547fe86a84...48.exe

windows7-x64

8

547fe86a84...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848

  • Size

    460KB

  • Sample

    221127-2a9hxsgh2y

  • MD5

    42ea65ffc61947188cdb79cd9c0daf69

  • SHA1

    6de811d563fb014b847319e525f0abb2b33e1691

  • SHA256

    547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848

  • SHA512

    f92e902eff76b4b2f46d278f8b0a1eb41d9beec6fcb010b8a1bf2c1269de9e0fcb8ae9d027a18e457eeca47079469022b842207934a952bde0fadfa83408e1c1

  • SSDEEP

    12288:+sAw9HD4XRhlitra71HPVzRZvZlk7Mb3c/M7aYz3SaQOEXsasmgQBoVR/uZ:DuvlitqptRbB

Score
8/10

Malware Config

Targets

    • Target

      547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848

    • Size

      460KB

    • MD5

      42ea65ffc61947188cdb79cd9c0daf69

    • SHA1

      6de811d563fb014b847319e525f0abb2b33e1691

    • SHA256

      547fe86a840917a2fde70774e1fa8a2610581b42206474303231ded2f4179848

    • SHA512

      f92e902eff76b4b2f46d278f8b0a1eb41d9beec6fcb010b8a1bf2c1269de9e0fcb8ae9d027a18e457eeca47079469022b842207934a952bde0fadfa83408e1c1

    • SSDEEP

      12288:+sAw9HD4XRhlitra71HPVzRZvZlk7Mb3c/M7aYz3SaQOEXsasmgQBoVR/uZ:DuvlitqptRbB

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks