Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

21b4835196...f4.exe

windows7-x64

8

21b4835196...f4.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21b48351968b6204ff23156e75a750f4

  • Size

    5.0MB

  • Sample

    231231-asjxfaegek

  • MD5

    21b48351968b6204ff23156e75a750f4

  • SHA1

    06dc472c06719b8c594d88e29032b702375e5a36

  • SHA256

    ba26e3ef16727597c94dbd44a7e8c9bf20235fb89dc3ff7b903ede549b1344bb

  • SHA512

    2e32875203010fb149eb4baa96dce90c2c47929fd8d71b73fccaeec8b25eb9708d4bdeedb709120fb21a1f77da41bb622586e7be16e3096eaa1cd957d8888c44

  • SSDEEP

    98304:A+0Vk2PM/S0VNkd0WRJ4PZ13hvt+cCrLC7HWl4On9nMDdiOZdqyBPSz6GGHrMUoo:A+0GSMkd0Dhvt+gZmlb8dmO9v

Score
8/10
evasionpersistencethemida

Malware Config

Targets

    • Target

      21b48351968b6204ff23156e75a750f4

    • Size

      5.0MB

    • MD5

      21b48351968b6204ff23156e75a750f4

    • SHA1

      06dc472c06719b8c594d88e29032b702375e5a36

    • SHA256

      ba26e3ef16727597c94dbd44a7e8c9bf20235fb89dc3ff7b903ede549b1344bb

    • SHA512

      2e32875203010fb149eb4baa96dce90c2c47929fd8d71b73fccaeec8b25eb9708d4bdeedb709120fb21a1f77da41bb622586e7be16e3096eaa1cd957d8888c44

    • SSDEEP

      98304:A+0Vk2PM/S0VNkd0WRJ4PZ13hvt+cCrLC7HWl4On9nMDdiOZdqyBPSz6GGHrMUoo:A+0GSMkd0Dhvt+gZmlb8dmO9v

    Score
    8/10
    evasionpersistencethemida

    • Stops running service(s)

      evasion

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks