Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

a2f7acf774...ab.exe

windows7-x64

8

a2f7acf774...ab.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2f7acf774d8041ccbc70216d53e48b35c53ca616768ec1dc082fb28669837ab

  • Size

    340KB

  • Sample

    221127-t5hdxsff8x

  • MD5

    e60dc796c1866851a49fc1fadb4ce11c

  • SHA1

    5fe42c6efffdd1f56a34d8ae15f255330ff19b96

  • SHA256

    a2f7acf774d8041ccbc70216d53e48b35c53ca616768ec1dc082fb28669837ab

  • SHA512

    f9648ba0f2c25a9e58440bca11c16864aba00fae69f2fff7ef74056969edc5a15dc7ebf04de3a3d43e36e97f367ec5a9b3165e36625f19a905defd20a985d857

  • SSDEEP

    6144:W0/O0QDYcpYPc31QS7NXW81XbKF/f508ewjy3r3dAC3PUL5sCf0:W0/jcKPE1f1xp+G8ew+rdAwPRCM

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      a2f7acf774d8041ccbc70216d53e48b35c53ca616768ec1dc082fb28669837ab

    • Size

      340KB

    • MD5

      e60dc796c1866851a49fc1fadb4ce11c

    • SHA1

      5fe42c6efffdd1f56a34d8ae15f255330ff19b96

    • SHA256

      a2f7acf774d8041ccbc70216d53e48b35c53ca616768ec1dc082fb28669837ab

    • SHA512

      f9648ba0f2c25a9e58440bca11c16864aba00fae69f2fff7ef74056969edc5a15dc7ebf04de3a3d43e36e97f367ec5a9b3165e36625f19a905defd20a985d857

    • SSDEEP

      6144:W0/O0QDYcpYPc31QS7NXW81XbKF/f508ewjy3r3dAC3PUL5sCf0:W0/jcKPE1f1xp+G8ew+rdAwPRCM

    Score
    8/10
    evasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks