Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b6a6994786...ac.dll

windows7-x64

1

b6a6994786...ac.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6a6994786e02939a224656aa7087c8b8b5722de9c2ed1d0fe30dff4235c24ac

  • Size

    27KB

  • Sample

    221205-jzg6vsef71

  • MD5

    abb6f77a22bdeafc6092d2b9049b7c8b

  • SHA1

    771455b77e06a27e793f9fa7bc9109c775b64d4e

  • SHA256

    b6a6994786e02939a224656aa7087c8b8b5722de9c2ed1d0fe30dff4235c24ac

  • SHA512

    3668534bc81bcc6d0249540e900c90b57c3ab683b33bba3d2e1f16a571f851d1fee496e05d2f8ee564df1e8ae31e42e49c03a51b2f9170f4994f2e001183150f

  • SSDEEP

    768:bowyehckZ8QI13K0XNvyyWVQA4aS17KiT99h1hJov:dl9UK0zVNtKiTDhs

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b6a6994786e02939a224656aa7087c8b8b5722de9c2ed1d0fe30dff4235c24ac

    • Size

      27KB

    • MD5

      abb6f77a22bdeafc6092d2b9049b7c8b

    • SHA1

      771455b77e06a27e793f9fa7bc9109c775b64d4e

    • SHA256

      b6a6994786e02939a224656aa7087c8b8b5722de9c2ed1d0fe30dff4235c24ac

    • SHA512

      3668534bc81bcc6d0249540e900c90b57c3ab683b33bba3d2e1f16a571f851d1fee496e05d2f8ee564df1e8ae31e42e49c03a51b2f9170f4994f2e001183150f

    • SSDEEP

      768:bowyehckZ8QI13K0XNvyyWVQA4aS17KiT99h1hJov:dl9UK0zVNtKiTDhs

    Score
    8/10
    persistenceupx

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks