Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

6cea15020b...8a.exe

windows7-x64

9

6cea15020b...8a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cea15020bdfb7210c77be75653d76137fafa09ea2fcdf2d3006dae0cbe0ab8a

  • Size

    767KB

  • Sample

    221201-eftckaca63

  • MD5

    7709f2775d31f68ee5efa479a1afaa28

  • SHA1

    51c555a2763a8760a0b473080cf2e582b6117088

  • SHA256

    6cea15020bdfb7210c77be75653d76137fafa09ea2fcdf2d3006dae0cbe0ab8a

  • SHA512

    80e929e6eba0bac0a76a5aa64687fd23c6c52fe70a1b92e98761607d599bafe26fabe6bd399ee34ab4325641671ec506b278b7648a802d266a8647cf49a0ddab

  • SSDEEP

    12288:VryS2KmxOEaIDGwU+xxfFMc0TQYyxuuHuii9XG2lm9J9ARssvYsbEOAEZ1XGwXNn:NoKmAIDGH+mJ8Yyx7KX/sJKqCYGhDwE

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      6cea15020bdfb7210c77be75653d76137fafa09ea2fcdf2d3006dae0cbe0ab8a

    • Size

      767KB

    • MD5

      7709f2775d31f68ee5efa479a1afaa28

    • SHA1

      51c555a2763a8760a0b473080cf2e582b6117088

    • SHA256

      6cea15020bdfb7210c77be75653d76137fafa09ea2fcdf2d3006dae0cbe0ab8a

    • SHA512

      80e929e6eba0bac0a76a5aa64687fd23c6c52fe70a1b92e98761607d599bafe26fabe6bd399ee34ab4325641671ec506b278b7648a802d266a8647cf49a0ddab

    • SSDEEP

      12288:VryS2KmxOEaIDGwU+xxfFMc0TQYyxuuHuii9XG2lm9J9ARssvYsbEOAEZ1XGwXNn:NoKmAIDGH+mJ8Yyx7KX/sJKqCYGhDwE

    Score
    9/10
    evasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks