ef931c95f81c4757bdff9b739eb86340cd3a44dc8bb517320c566365836db4f4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

ed73801326...66.exe

windows7-x64

ed73801326...66.exe

windows10-2004-x64

3

Sharing

General

Target

ed738013267ef1213ad4569dbfc49fcddbed1766
Size

392KB
Sample

230110-ctt5xahf99
MD5

dd170fa07c4f181bdfa2f170c287e91a
SHA1

ed738013267ef1213ad4569dbfc49fcddbed1766
SHA256

ef931c95f81c4757bdff9b739eb86340cd3a44dc8bb517320c566365836db4f4
SHA512

bcde3d86187e084ad703bcc6685f2ea19f6e8f0997da8f674ad7b9c7b9c7f62cc34bb79aabb74c2333c624dab6aedbd78d61eb0644e9f5e5fd079951d55e46e8
SSDEEP

12288:SDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:OR9eyWKwkJxruLUb

Score

10^/10

evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

ed738013267ef1213ad4569dbfc49fcddbed1766.exe

Resource

win7-20221111-en

evasion persistence trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ed738013267ef1213ad4569dbfc49fcddbed1766.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  ed738013267ef1213ad4569dbfc49fcddbed1766
- Size
  
  392KB
- MD5
  
  dd170fa07c4f181bdfa2f170c287e91a
- SHA1
  
  ed738013267ef1213ad4569dbfc49fcddbed1766
- SHA256
  
  ef931c95f81c4757bdff9b739eb86340cd3a44dc8bb517320c566365836db4f4
- SHA512
  
  bcde3d86187e084ad703bcc6685f2ea19f6e8f0997da8f674ad7b9c7b9c7f62cc34bb79aabb74c2333c624dab6aedbd78d61eb0644e9f5e5fd079951d55e46e8
- SSDEEP
  
  12288:SDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:OR9eyWKwkJxruLUb
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.