22fa46cb462ef067624cd618262621fc47f0c2ec7673815cb2d5ebdb4c85f6bf | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

eeada6db6c...0f.exe

windows7-x64

eeada6db6c...0f.exe

windows10-2004-x64

1

Sharing

General

Target

eeada6db6ca701d344a47915ffbb1c2b5990ab0f
Size

342KB
Sample

230110-b2akssge35
MD5

ef4113d5c5280bb72150b7dac47c406d
SHA1

eeada6db6ca701d344a47915ffbb1c2b5990ab0f
SHA256

22fa46cb462ef067624cd618262621fc47f0c2ec7673815cb2d5ebdb4c85f6bf
SHA512

73f087da7399d2f4c83795ef13f6cfeaf9c59c2de6a5da7fe14781a89971e7fe0f2fd267b8abd74d0f5cb66378769cf5536ea6675eeba5fd9b495c17d9ced4c9
SSDEEP

6144:Jg0NItfLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/fzdx:q1Fhgh2R8O+yFqpLh+zdx

Score

10^/10

evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

eeada6db6ca701d344a47915ffbb1c2b5990ab0f.exe

Resource

win7-20221111-en

evasion persistence trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

eeada6db6ca701d344a47915ffbb1c2b5990ab0f.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  
  eeada6db6ca701d344a47915ffbb1c2b5990ab0f
- Size
  
  342KB
- MD5
  
  ef4113d5c5280bb72150b7dac47c406d
- SHA1
  
  eeada6db6ca701d344a47915ffbb1c2b5990ab0f
- SHA256
  
  22fa46cb462ef067624cd618262621fc47f0c2ec7673815cb2d5ebdb4c85f6bf
- SHA512
  
  73f087da7399d2f4c83795ef13f6cfeaf9c59c2de6a5da7fe14781a89971e7fe0f2fd267b8abd74d0f5cb66378769cf5536ea6675eeba5fd9b495c17d9ced4c9
- SSDEEP
  
  6144:Jg0NItfLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/fzdx:q1Fhgh2R8O+yFqpLh+zdx
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.