Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0960afa653...3f.exe

windows7-x64

10

0960afa653...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0960afa65306b74d4cc96aee3465163f

  • Size

    407KB

  • Sample

    231225-gj9vtshhcp

  • MD5

    0960afa65306b74d4cc96aee3465163f

  • SHA1

    2bdc56dadaa2b9f78c183a36926fe9a3735c56bb

  • SHA256

    ca7dc93b08f189b5a22dc6b43f4a469f212e43642c7b6cf366e150681b866cb6

  • SHA512

    d39555f001417f5b3d8203dcc69937b1de28323b67e6621a625e69cc8564b2c30d3e9a7719c307f1e79298cb029a6998119def8ed1b48b83d1b386edb49e42c3

  • SSDEEP

    6144:UZfec9EbXDk6RkUKdrG1VVE+Iel+lXDZJfLufs73dOk0XDpNjNOpys8r:UZWtI6RkjureZJys73dOvXDpNjNe8r

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0960afa65306b74d4cc96aee3465163f

    • Size

      407KB

    • MD5

      0960afa65306b74d4cc96aee3465163f

    • SHA1

      2bdc56dadaa2b9f78c183a36926fe9a3735c56bb

    • SHA256

      ca7dc93b08f189b5a22dc6b43f4a469f212e43642c7b6cf366e150681b866cb6

    • SHA512

      d39555f001417f5b3d8203dcc69937b1de28323b67e6621a625e69cc8564b2c30d3e9a7719c307f1e79298cb029a6998119def8ed1b48b83d1b386edb49e42c3

    • SSDEEP

      6144:UZfec9EbXDk6RkUKdrG1VVE+Iel+lXDZJfLufs73dOk0XDpNjNOpys8r:UZWtI6RkjureZJys73dOvXDpNjNe8r

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks