Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ef77d2fe49...73.exe

windows7-x64

8

ef77d2fe49...73.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef77d2fe49af7851e67ed03e4deaa4df063748270170aa6c8c1c5085626bb473

  • Size

    196KB

  • Sample

    221204-blybxshd7z

  • MD5

    213a226f4c48f52f5717e1b8ce285680

  • SHA1

    45605fa3b820d9a13ff2f3723d035adc6f476e28

  • SHA256

    ef77d2fe49af7851e67ed03e4deaa4df063748270170aa6c8c1c5085626bb473

  • SHA512

    f6f9eb6d6b04de4717766ce5ec96d9b21871e7bdd9ba790b7b082602cdceae9f5b82616add056d5cadc3acc7728de1d6b12c2063609fee13e261e4e56e0b8612

  • SSDEEP

    6144:2r/hO/X39JyFqNZhf8rH9II4dr/hO/X39Jp:u/h+X6sfKCI4J/h+Xx

Score
8/10

Malware Config

Targets

    • Target

      ef77d2fe49af7851e67ed03e4deaa4df063748270170aa6c8c1c5085626bb473

    • Size

      196KB

    • MD5

      213a226f4c48f52f5717e1b8ce285680

    • SHA1

      45605fa3b820d9a13ff2f3723d035adc6f476e28

    • SHA256

      ef77d2fe49af7851e67ed03e4deaa4df063748270170aa6c8c1c5085626bb473

    • SHA512

      f6f9eb6d6b04de4717766ce5ec96d9b21871e7bdd9ba790b7b082602cdceae9f5b82616add056d5cadc3acc7728de1d6b12c2063609fee13e261e4e56e0b8612

    • SSDEEP

      6144:2r/hO/X39JyFqNZhf8rH9II4dr/hO/X39Jp:u/h+X6sfKCI4J/h+Xx

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks