Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

f9bcb20fba...1b.exe

windows7-x64

5

f9bcb20fba...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9bcb20fba36256268e5ea121b91f31b

  • Size

    1.9MB

  • Sample

    231228-1fgjnachb9

  • MD5

    f9bcb20fba36256268e5ea121b91f31b

  • SHA1

    3af46c6904ce5424e498a2be169fc61f7dca6093

  • SHA256

    7cfb1f11490e63ad8328b5f02727242be0a80cf1e4f0a41c8f62a98039fbcb1f

  • SHA512

    523e1553b9e15f236c0f1a4a6683d1656d380355c7d8b83c743ff6330ff9098726174702c7b7062718f22b7a9b319913292c55c110f75d90d18b7d800e88448f

  • SSDEEP

    12288:UZWtI6Rk6OB0vOB07wOgOB0vOB07wOgOB0vOB07wOgOB0vOB07wOgOB0vOB07VCh:Uuha6OWO0aOWO0aOWO0aOWO0aOWO0AJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f9bcb20fba36256268e5ea121b91f31b

    • Size

      1.9MB

    • MD5

      f9bcb20fba36256268e5ea121b91f31b

    • SHA1

      3af46c6904ce5424e498a2be169fc61f7dca6093

    • SHA256

      7cfb1f11490e63ad8328b5f02727242be0a80cf1e4f0a41c8f62a98039fbcb1f

    • SHA512

      523e1553b9e15f236c0f1a4a6683d1656d380355c7d8b83c743ff6330ff9098726174702c7b7062718f22b7a9b319913292c55c110f75d90d18b7d800e88448f

    • SSDEEP

      12288:UZWtI6Rk6OB0vOB07wOgOB0vOB07wOgOB0vOB07wOgOB0vOB07wOgOB0vOB07VCh:Uuha6OWO0aOWO0aOWO0aOWO0aOWO0AJ

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks