17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

17b8295b03...6d.exe

windows7-x64

8

17b8295b03...6d.exe

windows10-2004-x64

8

Sharing

General

Target

17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d
Size

3.3MB
Sample

231016-wkdaksbc6x
MD5

117c1c9afbad622faf68d2b16c502e28
SHA1

157eb74909865cdb613d1e2ba8969c61635b383c
SHA256

17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d
SHA512

ba523dea8264763fd1cfc52d3e1e33b241e4bb042deec33f3975fa3ff870dbe9840d828f3059fcf727ea891b76beebdaa149389d54699dbb03f1d9d3d2d6cfaf
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlll8jSxdd7sHw1+IYcoJiMdqueCzVos:c+8X9G3vP3AM3lgSxdd7sHo9owapeu7

Score

8^/10

persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d.exe

Resource

win7-20230831-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d
- Size
  
  3.3MB
- MD5
  
  117c1c9afbad622faf68d2b16c502e28
- SHA1
  
  157eb74909865cdb613d1e2ba8969c61635b383c
- SHA256
  
  17b8295b03689991e52044d96a1be2cb9886b496e0bcc6bdad93a90edbc75d6d
- SHA512
  
  ba523dea8264763fd1cfc52d3e1e33b241e4bb042deec33f3975fa3ff870dbe9840d828f3059fcf727ea891b76beebdaa149389d54699dbb03f1d9d3d2d6cfaf
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlll8jSxdd7sHw1+IYcoJiMdqueCzVos:c+8X9G3vP3AM3lgSxdd7sHo9owapeu7
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.