Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

C/ProgramD...54.exe

windows7-x64

7

C/ProgramD...54.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954.zip

  • Size

    8.6MB

  • Sample

    230823-rx229acf79

  • MD5

    069280a442d5625b7c0d7557a3add6aa

  • SHA1

    8cb4dca71126fc6fc6bd1335d76b1419d4e3565b

  • SHA256

    38b3ef87b76984e6842d9abad4fb97ecdce60e074255d78ec2ee866836a21dfc

  • SHA512

    432f5f01605345f3400a3bcb59ed7fb53e5133035cbfbd66bcb00afbf2dbdbd5c27dc8f0f9baaa5de71f0c4051bb8ac9636375b8dd141319704d7e83dbabc9f8

  • SSDEEP

    196608:VB4M93VjPmOTA1BnjQOEi1utiiAxAhwaVFZn3WVCN2iGm9ZR/A1Nv36/v:VB4M9FRTInDHctifZoFZ3iI23m9P/A1S

Score
8/10
persistence

Malware Config

Targets

    • Target

      C/ProgramData/Sentinel/AFUCache/b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954

    • Size

      9.3MB

    • MD5

      1b286ad764c54202bc8e2fa9d5c8df60

    • SHA1

      3a4a10cd55df20a17a3f65ee1afa8e47e7c703ae

    • SHA256

      b39ecf1622578c2fb6444e6a82ed9a955f37369b07cfe9fbf88c84d79b64a954

    • SHA512

      b804261afb336e34197a7434904f9aa10e5c45e16aa7d334152b6bd54fafafb58dbe78e1939ad87bc8d5d2b3bbaf72ec6df3dd63fb60519654410dec601e55c5

    • SSDEEP

      196608:2yWDJp+GJ4FRT3qboM/PzujcKGJDKulb/hz8JQ8QnFDRfZVB7c:2yI2GJ4S/CjcXeyfnRVB7c

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Registers new Print Monitor

      persistence

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks