Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

1037c6fa49...5c.exe

windows7-x64

10

1037c6fa49...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1037c6fa49793bf01883643a1df5055c

  • Size

    133KB

  • Sample

    231230-gc4p8sfbbl

  • MD5

    1037c6fa49793bf01883643a1df5055c

  • SHA1

    99532825f71b4fc24fedab8a690041c8872a8af7

  • SHA256

    928f05346650d5e3ac2da1998b382621148c2113faa5507ba70a0569a89c45cf

  • SHA512

    3cfda676f3da7fae76ae4f3a836e6a28837b6bbc79879026890fc8061d58fbc82e883cecd6fd3dc485bf5e67d22a35e9737768b561c48743dc9b789ad300f884

  • SSDEEP

    3072:Md5X+hR3hUI/7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrNRDz0:Mr6RRXNkVsuaRaU6mHGjD4

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      1037c6fa49793bf01883643a1df5055c

    • Size

      133KB

    • MD5

      1037c6fa49793bf01883643a1df5055c

    • SHA1

      99532825f71b4fc24fedab8a690041c8872a8af7

    • SHA256

      928f05346650d5e3ac2da1998b382621148c2113faa5507ba70a0569a89c45cf

    • SHA512

      3cfda676f3da7fae76ae4f3a836e6a28837b6bbc79879026890fc8061d58fbc82e883cecd6fd3dc485bf5e67d22a35e9737768b561c48743dc9b789ad300f884

    • SSDEEP

      3072:Md5X+hR3hUI/7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrNRDz0:Mr6RRXNkVsuaRaU6mHGjD4

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies Windows Firewall

      evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks