Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

a367de4bf7...b7.exe

windows7-x64

8

a367de4bf7...b7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a367de4bf7f4a5c1cfa7ac68dc6817b7

  • Size

    54KB

  • Sample

    240225-k5439aha81

  • MD5

    a367de4bf7f4a5c1cfa7ac68dc6817b7

  • SHA1

    b087f39fa561acd65c6ec35e51d1df46d37e1446

  • SHA256

    bdbb1a14e40484f3f44799186ea8006d06c0fd457b7acc9b5d82d1bd3053aa0e

  • SHA512

    2dc948f05ee346c31d4d0ca4fe3221662e7959cabca8bc3fb6e70136d65e4556d9c1130f1ad6294cf1c296ce7670014fcbdc6c2165f90517ab9d4e6bdceb2767

  • SSDEEP

    1536:3Gi4zOWgjJ4W7LxtuH1YmgtRjhkUZ+uooJiMzfljC:2JzCJ4KLHum/GUhVgsVC

Score
8/10
adwarebootkitpersistencestealerupx

Malware Config

Targets

    • Target

      a367de4bf7f4a5c1cfa7ac68dc6817b7

    • Size

      54KB

    • MD5

      a367de4bf7f4a5c1cfa7ac68dc6817b7

    • SHA1

      b087f39fa561acd65c6ec35e51d1df46d37e1446

    • SHA256

      bdbb1a14e40484f3f44799186ea8006d06c0fd457b7acc9b5d82d1bd3053aa0e

    • SHA512

      2dc948f05ee346c31d4d0ca4fe3221662e7959cabca8bc3fb6e70136d65e4556d9c1130f1ad6294cf1c296ce7670014fcbdc6c2165f90517ab9d4e6bdceb2767

    • SSDEEP

      1536:3Gi4zOWgjJ4W7LxtuH1YmgtRjhkUZ+uooJiMzfljC:2JzCJ4KLHum/GUhVgsVC

    Score
    8/10
    adwarebootkitpersistencestealerupx

    • Blocklisted process makes network request

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks