Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9acfcdd8f5...fd.exe

windows7-x64

8

9acfcdd8f5...fd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9acfcdd8f58985bc233182eb265943d53d71bf84dfed630c6bbab336e682fbfd

  • Size

    529KB

  • Sample

    221204-m871esgf4z

  • MD5

    49a84c0fa7e66a7b99dbf78020c563bc

  • SHA1

    8a863a00444c2e75af0835ed0953476d2dedeb3b

  • SHA256

    9acfcdd8f58985bc233182eb265943d53d71bf84dfed630c6bbab336e682fbfd

  • SHA512

    068819c7ed1bf9ae33abe9261db12a2855e5315dd0d8ef0ac0c7fc46ac26d41a06a9b584211982a4f16177eb2b4cc414288427e1559ae8da472f18cb211a81df

  • SSDEEP

    12288:7s4Hzi41sI8+b4KFx0rugmqLig5U0BcfrByu5U0aA3u/gQrfZ4mbpa:7sE6I8g0JmqLxBcByuU0aku/gsfmiA

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      9acfcdd8f58985bc233182eb265943d53d71bf84dfed630c6bbab336e682fbfd

    • Size

      529KB

    • MD5

      49a84c0fa7e66a7b99dbf78020c563bc

    • SHA1

      8a863a00444c2e75af0835ed0953476d2dedeb3b

    • SHA256

      9acfcdd8f58985bc233182eb265943d53d71bf84dfed630c6bbab336e682fbfd

    • SHA512

      068819c7ed1bf9ae33abe9261db12a2855e5315dd0d8ef0ac0c7fc46ac26d41a06a9b584211982a4f16177eb2b4cc414288427e1559ae8da472f18cb211a81df

    • SSDEEP

      12288:7s4Hzi41sI8+b4KFx0rugmqLig5U0BcfrByu5U0aA3u/gQrfZ4mbpa:7sE6I8g0JmqLxBcByuU0aku/gsfmiA

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks