Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

f329f26f17...02.exe

windows7-x64

10

f329f26f17...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f329f26f17695afc1155d04b40267702.exe

  • Size

    778KB

  • Sample

    240109-xhrwmagdcl

  • MD5

    f329f26f17695afc1155d04b40267702

  • SHA1

    da158ea773f1f65a2d7e4e4cb149f2802dac88ec

  • SHA256

    464bcafd4ce6a5cdabaed206dfb1f1e06e9937602f9eb3b3a781f4adfe06bf67

  • SHA512

    789d2406c5978c59727e424a69a35d96c61da8b2e67689149da5359dca6939d47717d3434c53915e4d907a7071029737e14c87e0bb0e4a21ef023618f7bbf32f

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KU/UOPSe570Szp3CrG1VVE+I2GFrQZb++tdsHP4+QfI6Uw:UZWtI6RktOB0VuxerQZb+md4w1Uw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f329f26f17695afc1155d04b40267702.exe

    • Size

      778KB

    • MD5

      f329f26f17695afc1155d04b40267702

    • SHA1

      da158ea773f1f65a2d7e4e4cb149f2802dac88ec

    • SHA256

      464bcafd4ce6a5cdabaed206dfb1f1e06e9937602f9eb3b3a781f4adfe06bf67

    • SHA512

      789d2406c5978c59727e424a69a35d96c61da8b2e67689149da5359dca6939d47717d3434c53915e4d907a7071029737e14c87e0bb0e4a21ef023618f7bbf32f

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KU/UOPSe570Szp3CrG1VVE+I2GFrQZb++tdsHP4+QfI6Uw:UZWtI6RktOB0VuxerQZb+md4w1Uw

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks