Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5771257431...14.exe

windows7-x64

10

5771257431...14.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5771257431fa728fd9c7461588c10308d4a2dd9aeffcc8ffa18662f6b1ffbb14

  • Size

    135KB

  • Sample

    221201-ezsv5shb4v

  • MD5

    3107eeb8708622e3974a0c1ca6e74180

  • SHA1

    f44a8141adcb07ad89d3485acfa3d6ffaa62fd0f

  • SHA256

    5771257431fa728fd9c7461588c10308d4a2dd9aeffcc8ffa18662f6b1ffbb14

  • SHA512

    8af567a67b0200c5b0b318ddda6e92b84d03bec05157ba2c395fb24208ea5543e1aa95061ab0dbc72c948fc8994dd0b2af08ea8709a1fb2d3adbb0f94b9f4981

  • SSDEEP

    3072:SgU5jn9oMnKY9KsPz1EwIYc9S7hXufS1:Sg6jSMnnz1JYw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5771257431fa728fd9c7461588c10308d4a2dd9aeffcc8ffa18662f6b1ffbb14

    • Size

      135KB

    • MD5

      3107eeb8708622e3974a0c1ca6e74180

    • SHA1

      f44a8141adcb07ad89d3485acfa3d6ffaa62fd0f

    • SHA256

      5771257431fa728fd9c7461588c10308d4a2dd9aeffcc8ffa18662f6b1ffbb14

    • SHA512

      8af567a67b0200c5b0b318ddda6e92b84d03bec05157ba2c395fb24208ea5543e1aa95061ab0dbc72c948fc8994dd0b2af08ea8709a1fb2d3adbb0f94b9f4981

    • SSDEEP

      3072:SgU5jn9oMnKY9KsPz1EwIYc9S7hXufS1:Sg6jSMnnz1JYw

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Sets service image path in registry

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks