Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1b3d5fef90...cc.exe

windows7-x64

10

1b3d5fef90...cc.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc

  • Size

    299KB

  • Sample

    221202-adx6hshd3s

  • MD5

    1e679c8c8d32493ca5fe30ab75facdb0

  • SHA1

    1e9b53f2f823dc918098801c7a7dbbbf4e07e579

  • SHA256

    1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc

  • SHA512

    8271076269ad74ee5aa56f6fc9f1d00286c8ed8d40114724018e70ebd992f65489b9ca24b5ed6e6e7183d4d9ae2dc90e7c92b38290aa6fa46029002a4ce02d14

  • SSDEEP

    3072:VXO42ZK/rUc+WmvohlclLtLjc+F3lywxXLLNjLSYrB5a4TqmOp0pkc9E2aNFf8:4KTUqjclLtf9xXLtfacD/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc

    • Size

      299KB

    • MD5

      1e679c8c8d32493ca5fe30ab75facdb0

    • SHA1

      1e9b53f2f823dc918098801c7a7dbbbf4e07e579

    • SHA256

      1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc

    • SHA512

      8271076269ad74ee5aa56f6fc9f1d00286c8ed8d40114724018e70ebd992f65489b9ca24b5ed6e6e7183d4d9ae2dc90e7c92b38290aa6fa46029002a4ce02d14

    • SSDEEP

      3072:VXO42ZK/rUc+WmvohlclLtLjc+F3lywxXLLNjLSYrB5a4TqmOp0pkc9E2aNFf8:4KTUqjclLtf9xXLtfacD/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks