Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6ade0b5492...3f.exe

windows7-x64

10

6ade0b5492...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ade0b549267dff96ce189415c60aade2752f99d4c06da3caac606b0535c8f3f

  • Size

    430KB

  • Sample

    240310-1stdzsch31

  • MD5

    2a7f8eefe947a2e6c87fea92d5f2c2f4

  • SHA1

    2e10fb4b9c33203cf7fecd1379d8b773fd902d95

  • SHA256

    6ade0b549267dff96ce189415c60aade2752f99d4c06da3caac606b0535c8f3f

  • SHA512

    cfb4328a26aa9e100a26d1932a5c68abb7aacd261a3a3f8c2bcd46d8d08643a87ccbcba1cb9b995b8ba95a2373cb1973242a703e22d6117756598e328f96e335

  • SSDEEP

    6144:3qbqr6uRIRMrRs+HLlD0rN2ZwVht740Psz:3CEHpoxso

Score
10/10
persistence

Malware Config

Targets

    • Target

      6ade0b549267dff96ce189415c60aade2752f99d4c06da3caac606b0535c8f3f

    • Size

      430KB

    • MD5

      2a7f8eefe947a2e6c87fea92d5f2c2f4

    • SHA1

      2e10fb4b9c33203cf7fecd1379d8b773fd902d95

    • SHA256

      6ade0b549267dff96ce189415c60aade2752f99d4c06da3caac606b0535c8f3f

    • SHA512

      cfb4328a26aa9e100a26d1932a5c68abb7aacd261a3a3f8c2bcd46d8d08643a87ccbcba1cb9b995b8ba95a2373cb1973242a703e22d6117756598e328f96e335

    • SSDEEP

      6144:3qbqr6uRIRMrRs+HLlD0rN2ZwVht740Psz:3CEHpoxso

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks