Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1f2920fb60...78.exe

windows7-x64

10

1f2920fb60...78.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f2920fb60972695c79295840b3f1278

  • Size

    508KB

  • Sample

    231230-2w77zsgbgk

  • MD5

    1f2920fb60972695c79295840b3f1278

  • SHA1

    3b5746a9b4d161fbac4a331688e6a315e03268c3

  • SHA256

    203d71670c17ce12eac668d3ed5d94d7dd41ea3b15e0c77daaa0b85968269f72

  • SHA512

    698d17fad1b9364aa1bd7b6d729fab2592fe8521d31833b57873467d5823579c3a26c62211f2b4a1b4d1d4bf07073c4dcdf104409aae885d7bd61b126ae417f1

  • SSDEEP

    6144:UZfec9EbXDk6RkULKFa/UOPSe570Szp37/UOPSe570Szp39BS:UZWtI6RkUK9OB07OB0qA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1f2920fb60972695c79295840b3f1278

    • Size

      508KB

    • MD5

      1f2920fb60972695c79295840b3f1278

    • SHA1

      3b5746a9b4d161fbac4a331688e6a315e03268c3

    • SHA256

      203d71670c17ce12eac668d3ed5d94d7dd41ea3b15e0c77daaa0b85968269f72

    • SHA512

      698d17fad1b9364aa1bd7b6d729fab2592fe8521d31833b57873467d5823579c3a26c62211f2b4a1b4d1d4bf07073c4dcdf104409aae885d7bd61b126ae417f1

    • SSDEEP

      6144:UZfec9EbXDk6RkULKFa/UOPSe570Szp37/UOPSe570Szp39BS:UZWtI6RkUK9OB07OB0qA

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks