Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

d2ec79dea2...00.exe

windows7-x64

7

d2ec79dea2...00.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00.zip

  • Size

    3.8MB

  • Sample

    231119-zkyhasbe34

  • MD5

    3dca749dd276964e83dc5986f6da1dde

  • SHA1

    6ad9a0af452d562511fd971183e9c82f8d3fdf8b

  • SHA256

    e9d1b358658d21afa9a212808e8cdfa8aa28ce1ba412a6e976b2cb6361177d04

  • SHA512

    914c37bb498ee048b1aa5c6e2f2b4aba4636d2123cf3f1a22ee74253bfaffe5969f57f7c77528be079709b975d8c7538251b94f3bb4f0af0a9709bcdb54f7ae4

  • SSDEEP

    98304:4eQfv1K6dTjrhfTy5rnUOqcnuM2AWKXvAYrYS1eDtyRLxsR:4xdK+TZTU7UObhqYUCeQL6R

Score
7/10
discovery

Malware Config

Targets

    • Target

      d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00.exe

    • Size

      4.0MB

    • MD5

      20eed4441eab2600d935db7d8384a807

    • SHA1

      3acf7f616dd5463a73bafb79379a22a1fac6ccde

    • SHA256

      d2ec79dea2c343c76e98d2ff149c7ff39ca97d6bd169619a9db4383e860e3f00

    • SHA512

      ae67536b2fbe4d88d15e39aa50713f676c0450f53ac5cbd0502d1f66130dfdcda0b9e4476598133400b79c19d4c5d95f15153ca9c81d1c97474e3ea838159624

    • SSDEEP

      98304:ldZzBLmJR0be89sNUsyV4G6utggjMUQe7mMlEfy9HUsc3AX6fi7e:PZzkJebJsNbmV6HPe9Ef00n3jfi7e

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks