Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

45316370c4...61.exe

windows7-x64

1

45316370c4...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45316370c4acf18728aa5363cb7ca861.exe

  • Size

    2.6MB

  • Sample

    240106-mrwaasfeb3

  • MD5

    45316370c4acf18728aa5363cb7ca861

  • SHA1

    dcacfe812e001b260b0c29e36a4190725b533737

  • SHA256

    caee85b6b5716533b54047c8cd6bbe51589cb1429b54dcf16b613538a1efbc98

  • SHA512

    d81efb8f2fdc1fdcaff49e87ce6923e8f9305240c6330958a7f8949a14ce89b1ae62cb3f8fdb6a2553b834015eafd8445cc0dabff347849cacebdd9285d4fc11

  • SSDEEP

    49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/q:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      45316370c4acf18728aa5363cb7ca861.exe

    • Size

      2.6MB

    • MD5

      45316370c4acf18728aa5363cb7ca861

    • SHA1

      dcacfe812e001b260b0c29e36a4190725b533737

    • SHA256

      caee85b6b5716533b54047c8cd6bbe51589cb1429b54dcf16b613538a1efbc98

    • SHA512

      d81efb8f2fdc1fdcaff49e87ce6923e8f9305240c6330958a7f8949a14ce89b1ae62cb3f8fdb6a2553b834015eafd8445cc0dabff347849cacebdd9285d4fc11

    • SSDEEP

      49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/q:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks