Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

31f8e9ff93...cd.exe

windows7-x64

10

31f8e9ff93...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31f8e9ff93bd9b7ba170cc57468a3681fc11133fc36d816170f56f3a868c9bcd

  • Size

    464KB

  • Sample

    240308-w7vs5sdg95

  • MD5

    db1c3f09860c42744c11088d19e8e3a8

  • SHA1

    8664b5523849e789d25b41d4b353f6c7579c9fd8

  • SHA256

    31f8e9ff93bd9b7ba170cc57468a3681fc11133fc36d816170f56f3a868c9bcd

  • SHA512

    f589c59e01c15083afc70441dbc41de8f8fad7bba7fdc66297525ead10d4dd114cd694dc47599232b27ef1cc9724ff00b1bd9cb7392722286b1bd75f0634f60c

  • SSDEEP

    6144:2IYqC89jFpebBEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC:1p9j/OEVI2C4EVu2JEVcBEVI2C

Score
10/10
persistence

Malware Config

Targets

    • Target

      31f8e9ff93bd9b7ba170cc57468a3681fc11133fc36d816170f56f3a868c9bcd

    • Size

      464KB

    • MD5

      db1c3f09860c42744c11088d19e8e3a8

    • SHA1

      8664b5523849e789d25b41d4b353f6c7579c9fd8

    • SHA256

      31f8e9ff93bd9b7ba170cc57468a3681fc11133fc36d816170f56f3a868c9bcd

    • SHA512

      f589c59e01c15083afc70441dbc41de8f8fad7bba7fdc66297525ead10d4dd114cd694dc47599232b27ef1cc9724ff00b1bd9cb7392722286b1bd75f0634f60c

    • SSDEEP

      6144:2IYqC89jFpebBEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC:1p9j/OEVI2C4EVu2JEVcBEVI2C

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks