Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

eb63df874a...63.exe

windows7-x64

10

eb63df874a...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb63df874af3c40abe3e518733a53063.exe

  • Size

    6.3MB

  • Sample

    240109-xbrmaahba6

  • MD5

    eb63df874af3c40abe3e518733a53063

  • SHA1

    e281270fd0fb5147daaac0a4e99b3a60673713db

  • SHA256

    3163334553b427a214127d07752b9663a7bf452b9c7a41d5832ef3b1946ddff4

  • SHA512

    945b1eb5c81b2bfc0ce27616da46812eea8df71701c91a9fda8804f416a8b2cfbdb7feaef834a23a1d11340a8822eb1ef9ba687e8e581c3512c0a16d3db14ee3

  • SSDEEP

    98304:irQZzrQZ4rQZzrQZ4rQZzrQZ4rQZzrQZ4rQZzrQZZ:ir2zr24r2zr24r2zr24r2zr24r2zr2Z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eb63df874af3c40abe3e518733a53063.exe

    • Size

      6.3MB

    • MD5

      eb63df874af3c40abe3e518733a53063

    • SHA1

      e281270fd0fb5147daaac0a4e99b3a60673713db

    • SHA256

      3163334553b427a214127d07752b9663a7bf452b9c7a41d5832ef3b1946ddff4

    • SHA512

      945b1eb5c81b2bfc0ce27616da46812eea8df71701c91a9fda8804f416a8b2cfbdb7feaef834a23a1d11340a8822eb1ef9ba687e8e581c3512c0a16d3db14ee3

    • SSDEEP

      98304:irQZzrQZ4rQZzrQZ4rQZzrQZ4rQZzrQZ4rQZzrQZZ:ir2zr24r2zr24r2zr24r2zr24r2zr2Z

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks