Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

803fbdbce2...22.exe

windows7-x64

10

803fbdbce2...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    803fbdbce2eb5f3dfb87edfb0b8e0822

  • Size

    2.6MB

  • Sample

    240129-tdj4faehdn

  • MD5

    803fbdbce2eb5f3dfb87edfb0b8e0822

  • SHA1

    6a8d54d2244a6e8bd721577d7880471dedb8275f

  • SHA256

    b49880208b056416c42fe175c114bb2f30511c2e3da9b7c01b07981306a76b0a

  • SHA512

    d28918e26ab249fb98352c8edcddd47f31cdc5066f798557938607ecbfe04397d293a33e94ad14f177a6ba36b77bd2b662852332e1b36d5b5ef7a2d2ea13c5b3

  • SSDEEP

    24576:UuhaueZJ8NI8z2eZJ8NI8zKeZJ8NI8z2eZJ8NI8zKeZJ8NI8z2eZJ8NI8zKeZJ87:be8r8n8r8n8r8n8r8n8r8n8r8S

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      803fbdbce2eb5f3dfb87edfb0b8e0822

    • Size

      2.6MB

    • MD5

      803fbdbce2eb5f3dfb87edfb0b8e0822

    • SHA1

      6a8d54d2244a6e8bd721577d7880471dedb8275f

    • SHA256

      b49880208b056416c42fe175c114bb2f30511c2e3da9b7c01b07981306a76b0a

    • SHA512

      d28918e26ab249fb98352c8edcddd47f31cdc5066f798557938607ecbfe04397d293a33e94ad14f177a6ba36b77bd2b662852332e1b36d5b5ef7a2d2ea13c5b3

    • SSDEEP

      24576:UuhaueZJ8NI8z2eZJ8NI8zKeZJ8NI8z2eZJ8NI8zKeZJ8NI8z2eZJ8NI8zKeZJ87:be8r8n8r8n8r8n8r8n8r8n8r8S

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks