Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

25ed00bc4a...a9.exe

windows7-x64

8

25ed00bc4a...a9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25ed00bc4a03bbbab0ae0ccb79a1b9a9

  • Size

    4.1MB

  • Sample

    231231-dqd5ysfcbl

  • MD5

    25ed00bc4a03bbbab0ae0ccb79a1b9a9

  • SHA1

    22314ffe0affc7d952e93c758624c299afa5f0a6

  • SHA256

    5b7dd393e5bd12b7998b78b777324dd882fa8621889f9c4bdc9537574e5e4b22

  • SHA512

    80dfe42479b41f7d08fc6f2f970315b868b2e249f3d03b98fe897bb33d497e3422b7e95c7ec6bda98a2098de05c31793d3fdfc43a332d3e60bae06d972e624db

  • SSDEEP

    98304:Hz7Xb6rg/JwCcJnsgt1vdo08s2JpQpwh4Vlmfxl7+:/Xb6rgxcp99dIJpQp7Lm6

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      25ed00bc4a03bbbab0ae0ccb79a1b9a9

    • Size

      4.1MB

    • MD5

      25ed00bc4a03bbbab0ae0ccb79a1b9a9

    • SHA1

      22314ffe0affc7d952e93c758624c299afa5f0a6

    • SHA256

      5b7dd393e5bd12b7998b78b777324dd882fa8621889f9c4bdc9537574e5e4b22

    • SHA512

      80dfe42479b41f7d08fc6f2f970315b868b2e249f3d03b98fe897bb33d497e3422b7e95c7ec6bda98a2098de05c31793d3fdfc43a332d3e60bae06d972e624db

    • SSDEEP

      98304:Hz7Xb6rg/JwCcJnsgt1vdo08s2JpQpwh4Vlmfxl7+:/Xb6rgxcp99dIJpQp7Lm6

    Score
    8/10
    evasionpersistence

    • Modifies Windows Firewall

      evasion

    • Stops running service(s)

      evasion

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks