Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

487eddb1dc...fc.exe

windows7-x64

10

487eddb1dc...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    487eddb1dc617d7ec2badb1def0436fc

  • Size

    710KB

  • Sample

    231226-bme7qshefm

  • MD5

    487eddb1dc617d7ec2badb1def0436fc

  • SHA1

    165a5d0083483b4086c2d94acb1a7aa74c62d467

  • SHA256

    a280210be9b1a288ded43bbf31a0924ed8cfb2d043c70b3c0eee21dd74326c26

  • SHA512

    762cdb56468b36af91b3062efffd880baf0a09ce30e6f82df729e5d245a3cda2eb1ae5b0065c0268bc2371274f25a35040c8b94ce92722b0b81c4b8723281b1b

  • SSDEEP

    6144:UZfec9EbXDk6RkdKUGFrQZb++tdsHP4+QfI6UDnmy+g46nmy+g4H:UZWtI6RkherQZb+md4w1UDV2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      487eddb1dc617d7ec2badb1def0436fc

    • Size

      710KB

    • MD5

      487eddb1dc617d7ec2badb1def0436fc

    • SHA1

      165a5d0083483b4086c2d94acb1a7aa74c62d467

    • SHA256

      a280210be9b1a288ded43bbf31a0924ed8cfb2d043c70b3c0eee21dd74326c26

    • SHA512

      762cdb56468b36af91b3062efffd880baf0a09ce30e6f82df729e5d245a3cda2eb1ae5b0065c0268bc2371274f25a35040c8b94ce92722b0b81c4b8723281b1b

    • SSDEEP

      6144:UZfec9EbXDk6RkdKUGFrQZb++tdsHP4+QfI6UDnmy+g46nmy+g4H:UZWtI6RkherQZb+md4w1UDV2

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks