Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0a5bc0c4ed...7f.exe

windows7-x64

10

0a5bc0c4ed...7f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a5bc0c4edebf59f51c43532a8695f7f

  • Size

    1.9MB

  • Sample

    231230-b252pscbdp

  • MD5

    0a5bc0c4edebf59f51c43532a8695f7f

  • SHA1

    346ccb61505d0c554997c5b767706a28393bbe69

  • SHA256

    8efdd75cbe81fcbeb47acf6082db087b668808f721aeaacc89d2b79efa4da971

  • SHA512

    9b18adf3d1d7f3100e153033f99728050f2188243d8aaf88f60abd9ed7ef02156d0267a9d5c1cdac7d45e6e3e2e3ea1a37b9054e2fb9f48f72f0bab096f4a9ba

  • SSDEEP

    12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGR4Z:RJcu8pl9d+VdCUhN1SsNK+1pSyA4Z

Score
10/10
aspackv2persistence

Malware Config

Targets

    • Target

      0a5bc0c4edebf59f51c43532a8695f7f

    • Size

      1.9MB

    • MD5

      0a5bc0c4edebf59f51c43532a8695f7f

    • SHA1

      346ccb61505d0c554997c5b767706a28393bbe69

    • SHA256

      8efdd75cbe81fcbeb47acf6082db087b668808f721aeaacc89d2b79efa4da971

    • SHA512

      9b18adf3d1d7f3100e153033f99728050f2188243d8aaf88f60abd9ed7ef02156d0267a9d5c1cdac7d45e6e3e2e3ea1a37b9054e2fb9f48f72f0bab096f4a9ba

    • SSDEEP

      12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyGR4Z:RJcu8pl9d+VdCUhN1SsNK+1pSyA4Z

    Score
    10/10
    aspackv2persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks