Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a9ab3c0706...4b.exe

windows7-x64

10

a9ab3c0706...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9ab3c07063b4bd6de21d1df6425d9d9c7ea22921cb6c9796f3e5c7cccb4ba4b

  • Size

    80KB

  • Sample

    221206-m8yrrafa6s

  • MD5

    0565bbdfd5711fc074d783739aa22d0f

  • SHA1

    0c1087e6f367f0fc16dcca3ba024a16dc075e9e8

  • SHA256

    a9ab3c07063b4bd6de21d1df6425d9d9c7ea22921cb6c9796f3e5c7cccb4ba4b

  • SHA512

    a4edf3b4bfdbabf8acc6cd148fd7cbc9a333221aded5191c22f115c8123080ad3b8c5ce995a86f8604bc41e4b6d6b1d5e14abea11436a9092ee26b53be499c3f

  • SSDEEP

    768:u94OyQzTGfJ5xGXrMdqOivexvqvWm6w9M17I36Fyz8ZQOWmI+VkpVUlk4GYxmzHc:u94xQxrMxiFvWjx1c36geQ5CkBzaQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a9ab3c07063b4bd6de21d1df6425d9d9c7ea22921cb6c9796f3e5c7cccb4ba4b

    • Size

      80KB

    • MD5

      0565bbdfd5711fc074d783739aa22d0f

    • SHA1

      0c1087e6f367f0fc16dcca3ba024a16dc075e9e8

    • SHA256

      a9ab3c07063b4bd6de21d1df6425d9d9c7ea22921cb6c9796f3e5c7cccb4ba4b

    • SHA512

      a4edf3b4bfdbabf8acc6cd148fd7cbc9a333221aded5191c22f115c8123080ad3b8c5ce995a86f8604bc41e4b6d6b1d5e14abea11436a9092ee26b53be499c3f

    • SSDEEP

      768:u94OyQzTGfJ5xGXrMdqOivexvqvWm6w9M17I36Fyz8ZQOWmI+VkpVUlk4GYxmzHc:u94xQxrMxiFvWjx1c36geQ5CkBzaQ

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks