Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

996887ad77...94.exe

windows7-x64

10

996887ad77...94.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    996887ad773945a7884931c5f1ff5c94

  • Size

    61KB

  • Sample

    240213-pgvbcshd9z

  • MD5

    996887ad773945a7884931c5f1ff5c94

  • SHA1

    bbe87a1764221a20f8f35b4291ddb5cce7a8f468

  • SHA256

    ff1caada5738fcb6cd6e4e83841e2bdfe49cbf767d7d4d6f1fd437e56b702a89

  • SHA512

    7ec3b233032423ce0d09dbb23b31af24f82469b07e0ff11b728bcbc3e22bf95e829a14565fe8b8199d461ed431f3b2d19146ff8cf934c92fb2eb650266a0dfaa

  • SSDEEP

    1536:B4lqiNHnPSMQQ+Z45SNTxdBlsZr48ECzJP0xBt7haC:GaMQ/7NdrlxaFPkt9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      996887ad773945a7884931c5f1ff5c94

    • Size

      61KB

    • MD5

      996887ad773945a7884931c5f1ff5c94

    • SHA1

      bbe87a1764221a20f8f35b4291ddb5cce7a8f468

    • SHA256

      ff1caada5738fcb6cd6e4e83841e2bdfe49cbf767d7d4d6f1fd437e56b702a89

    • SHA512

      7ec3b233032423ce0d09dbb23b31af24f82469b07e0ff11b728bcbc3e22bf95e829a14565fe8b8199d461ed431f3b2d19146ff8cf934c92fb2eb650266a0dfaa

    • SSDEEP

      1536:B4lqiNHnPSMQQ+Z45SNTxdBlsZr48ECzJP0xBt7haC:GaMQ/7NdrlxaFPkt9

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks