Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

81a3eac545...9b.dll

windows7-x64

8

81a3eac545...9b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81a3eac5452fb3c51b86bd2375d0e806e4e9a2b9ed11fd33c3f15dc12cf32c9b

  • Size

    66KB

  • Sample

    221203-ysp1fsbb69

  • MD5

    9665fc0bee2f17c2ac783a63231e9e71

  • SHA1

    069e651a0dab5c96dc8d3cdefc0b186fe24cbe73

  • SHA256

    81a3eac5452fb3c51b86bd2375d0e806e4e9a2b9ed11fd33c3f15dc12cf32c9b

  • SHA512

    85f31bb1ed2a7465bc643d487e95931faebbc73374dbaf3c5c136acddbc4efe61b9df230cdfe7b50f9a1f93de62fb9044383167fcc18c67ce916d6a881d24a35

  • SSDEEP

    768:hojY9PAJdMmJyj0Ml+oi/XSpSZbVfD0KoWyHaojY9PoufrNu/1IZoYgoah:0mIJdMmJyDl+tVZpoWyHjmgufyIZoYg

Score
10/10
evasion

Malware Config

Targets

    • Target

      81a3eac5452fb3c51b86bd2375d0e806e4e9a2b9ed11fd33c3f15dc12cf32c9b

    • Size

      66KB

    • MD5

      9665fc0bee2f17c2ac783a63231e9e71

    • SHA1

      069e651a0dab5c96dc8d3cdefc0b186fe24cbe73

    • SHA256

      81a3eac5452fb3c51b86bd2375d0e806e4e9a2b9ed11fd33c3f15dc12cf32c9b

    • SHA512

      85f31bb1ed2a7465bc643d487e95931faebbc73374dbaf3c5c136acddbc4efe61b9df230cdfe7b50f9a1f93de62fb9044383167fcc18c67ce916d6a881d24a35

    • SSDEEP

      768:hojY9PAJdMmJyj0Ml+oi/XSpSZbVfD0KoWyHaojY9PoufrNu/1IZoYgoah:0mIJdMmJyDl+tVZpoWyHjmgufyIZoYg

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks