Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e018d7eb5d...32.exe

windows7-x64

10

e018d7eb5d...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e018d7eb5dc05eed647a5a50cc70fa40_exe32.exe

  • Size

    474KB

  • Sample

    231015-yjb28sfh6x

  • MD5

    e018d7eb5dc05eed647a5a50cc70fa40

  • SHA1

    454403defd5cf518dc91cfa13dd892f79f01c17a

  • SHA256

    a9c8b824c0cdc42d7ed01395422365efef62cc288fdc56357d32f831c8f959d3

  • SHA512

    7f8bb0b514a27b6b07a231213021d11d7864d5731b8ee76dda4c645a8e2b64b61a71bb4167e41238ab2b8268d29bfb65e056f4dee22fadca1b1c56b3b626fb23

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKEli/i:nRDc3yWDNU+YUznzNjElWaT07NQtia

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e018d7eb5dc05eed647a5a50cc70fa40_exe32.exe

    • Size

      474KB

    • MD5

      e018d7eb5dc05eed647a5a50cc70fa40

    • SHA1

      454403defd5cf518dc91cfa13dd892f79f01c17a

    • SHA256

      a9c8b824c0cdc42d7ed01395422365efef62cc288fdc56357d32f831c8f959d3

    • SHA512

      7f8bb0b514a27b6b07a231213021d11d7864d5731b8ee76dda4c645a8e2b64b61a71bb4167e41238ab2b8268d29bfb65e056f4dee22fadca1b1c56b3b626fb23

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKEli/i:nRDc3yWDNU+YUznzNjElWaT07NQtia

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks