Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

08694264b2...05.exe

windows7-x64

10

08694264b2...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08694264b281488ee7e62bb7a7ef8af4216a2eab64c51ad7859f518058a47105

  • Size

    20KB

  • Sample

    230212-esae8aea61

  • MD5

    30a45c1799f30a182284b627f6fbc99a

  • SHA1

    f914e0f954d92ce8dffb662516e4fe9a3a67c637

  • SHA256

    08694264b281488ee7e62bb7a7ef8af4216a2eab64c51ad7859f518058a47105

  • SHA512

    ea53b4a023c966110de098edfd404cc040e262884dc7f02b8e48bbec55c52456dc822d0ad08257cea70f60309381403f359979965ab21508b64c6cfb482f7a3b

  • SSDEEP

    96:euv6Sy9pU03fpfc1FDWLWLmXz9fgFyc2:nG9Wp60mxfJc

Score
10/10
adwareevasionpersistencestealer

Malware Config

Targets

    • Target

      08694264b281488ee7e62bb7a7ef8af4216a2eab64c51ad7859f518058a47105

    • Size

      20KB

    • MD5

      30a45c1799f30a182284b627f6fbc99a

    • SHA1

      f914e0f954d92ce8dffb662516e4fe9a3a67c637

    • SHA256

      08694264b281488ee7e62bb7a7ef8af4216a2eab64c51ad7859f518058a47105

    • SHA512

      ea53b4a023c966110de098edfd404cc040e262884dc7f02b8e48bbec55c52456dc822d0ad08257cea70f60309381403f359979965ab21508b64c6cfb482f7a3b

    • SSDEEP

      96:euv6Sy9pU03fpfc1FDWLWLmXz9fgFyc2:nG9Wp60mxfJc

    Score
    10/10
    adwareevasionpersistencestealer

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Modifies system executable filetype association

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Registers new Print Monitor

      persistence

    • Sets file execution options in registry

      persistence

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks