Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8c0df7236a...b3.exe

windows7-x64

9

8c0df7236a...b3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c0df7236a57d8eb100a24ab25bcdfb6520ef4e8a2f4f6298dfef2e68d44d5b3

  • Size

    678KB

  • Sample

    221130-3mae2aac71

  • MD5

    a4c8149e443aeab93067ab99c97c8f8f

  • SHA1

    616e70ceb6f593a40d2be082459c14e2f677df83

  • SHA256

    8c0df7236a57d8eb100a24ab25bcdfb6520ef4e8a2f4f6298dfef2e68d44d5b3

  • SHA512

    81d9d8328eebd16e27f7446564012a46f3f25e0a810379fbf8e2b81b6c5599a1e3766d155b55502adafae1980f2fca81f136056c64252806585a8b6ed7aeb15b

  • SSDEEP

    12288:qzj/iWCKH0fkStuhp8f3DoVs7fBi2dnnm++J8Vhmp0+VGhcRNfy+Tp:ujqWxF4Cp8/rBi2hv88O/l5Tp

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      8c0df7236a57d8eb100a24ab25bcdfb6520ef4e8a2f4f6298dfef2e68d44d5b3

    • Size

      678KB

    • MD5

      a4c8149e443aeab93067ab99c97c8f8f

    • SHA1

      616e70ceb6f593a40d2be082459c14e2f677df83

    • SHA256

      8c0df7236a57d8eb100a24ab25bcdfb6520ef4e8a2f4f6298dfef2e68d44d5b3

    • SHA512

      81d9d8328eebd16e27f7446564012a46f3f25e0a810379fbf8e2b81b6c5599a1e3766d155b55502adafae1980f2fca81f136056c64252806585a8b6ed7aeb15b

    • SSDEEP

      12288:qzj/iWCKH0fkStuhp8f3DoVs7fBi2dnnm++J8Vhmp0+VGhcRNfy+Tp:ujqWxF4Cp8/rBi2hv88O/l5Tp

    Score
    9/10
    evasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks