Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

855edc8cfe...ec.exe

windows7-x64

8

855edc8cfe...ec.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    855edc8cfedaa48f9168bf102e52dcfe63f6c0b834d6ac9487b0beec42a308ec

  • Size

    1.3MB

  • Sample

    221202-xfbrmagf6s

  • MD5

    ddb3411a2e32e5aebe171ce949d03dfa

  • SHA1

    05599be048740ef7d1aad85446632b74a21d07cb

  • SHA256

    855edc8cfedaa48f9168bf102e52dcfe63f6c0b834d6ac9487b0beec42a308ec

  • SHA512

    4dd335fd27e5ed5abdc2a55b5b23a2b92e2e64859ce5835159bba85229b9cf657b9ca840968f9d7ee25c0ea3d706f4aebf495dbb3be971f0d9a764234a1ef964

  • SSDEEP

    24576:2+cojLYcSWBWKTaRRNf8u/VUncbiAr1ZbGOYv/MEgkElRavzYjo8Vuj8J8l:71LYJWUHRNfF/VfZbGOYMEgkEl/j2

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      855edc8cfedaa48f9168bf102e52dcfe63f6c0b834d6ac9487b0beec42a308ec

    • Size

      1.3MB

    • MD5

      ddb3411a2e32e5aebe171ce949d03dfa

    • SHA1

      05599be048740ef7d1aad85446632b74a21d07cb

    • SHA256

      855edc8cfedaa48f9168bf102e52dcfe63f6c0b834d6ac9487b0beec42a308ec

    • SHA512

      4dd335fd27e5ed5abdc2a55b5b23a2b92e2e64859ce5835159bba85229b9cf657b9ca840968f9d7ee25c0ea3d706f4aebf495dbb3be971f0d9a764234a1ef964

    • SSDEEP

      24576:2+cojLYcSWBWKTaRRNf8u/VUncbiAr1ZbGOYv/MEgkElRavzYjo8Vuj8J8l:71LYJWUHRNfF/VfZbGOYMEgkEl/j2

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks