Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

9ae90d2165...35.exe

windows7-x64

8

9ae90d2165...35.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435

  • Size

    243KB

  • Sample

    221205-nf95rahf4t

  • MD5

    a2e621cb7630d1eb95839242b92d92b5

  • SHA1

    6afdf66253e6cfad74ec6c308e848a9434afe490

  • SHA256

    9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435

  • SHA512

    fbaeb2d0e933d0e7cc74dc7217f5f73f384429931e4e6bc5495bc5751f7f75f47513de2bb72faf4c813ca7678473042e64b005814a7090c68a73021916aea232

  • SSDEEP

    6144:+PhHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg26:+PhgPOvb27SJm45OOizCW5N6

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435

    • Size

      243KB

    • MD5

      a2e621cb7630d1eb95839242b92d92b5

    • SHA1

      6afdf66253e6cfad74ec6c308e848a9434afe490

    • SHA256

      9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435

    • SHA512

      fbaeb2d0e933d0e7cc74dc7217f5f73f384429931e4e6bc5495bc5751f7f75f47513de2bb72faf4c813ca7678473042e64b005814a7090c68a73021916aea232

    • SSDEEP

      6144:+PhHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg26:+PhgPOvb27SJm45OOizCW5N6

    Score
    8/10
    evasionpersistenceupx

    • Disables taskbar notifications via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks