Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9f15efcfe0...fd.exe

windows7-x64

10

9f15efcfe0...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f15efcfe0bb3d8db756a8df353ace1d753a39caa0078dc1d17b5deb51d053fd

  • Size

    192KB

  • Sample

    240310-acvn1aef45

  • MD5

    bf1028bb07bad2fa4eb21a7804dc085b

  • SHA1

    efe89557e1bcf08fa1824e7af29a4602f92eb8ad

  • SHA256

    9f15efcfe0bb3d8db756a8df353ace1d753a39caa0078dc1d17b5deb51d053fd

  • SHA512

    6ab5409c445ac65ba491e1070f4e98608372791bb604f2197d7abd65b848146e560b03c7d91388fe0ab22a44fb018ee2fc92af2d4d1acff03f17b2526410dbcf

  • SSDEEP

    1536:pRiDgPf5BI5fNOMWrTyj+zeaeslDojOspkwISPMFMSqmznouy8O6Nuf51TQmQM2j:/8o5uNFYekwILqmLoutkTy27zU

Score
10/10
persistence

Malware Config

Targets

    • Target

      9f15efcfe0bb3d8db756a8df353ace1d753a39caa0078dc1d17b5deb51d053fd

    • Size

      192KB

    • MD5

      bf1028bb07bad2fa4eb21a7804dc085b

    • SHA1

      efe89557e1bcf08fa1824e7af29a4602f92eb8ad

    • SHA256

      9f15efcfe0bb3d8db756a8df353ace1d753a39caa0078dc1d17b5deb51d053fd

    • SHA512

      6ab5409c445ac65ba491e1070f4e98608372791bb604f2197d7abd65b848146e560b03c7d91388fe0ab22a44fb018ee2fc92af2d4d1acff03f17b2526410dbcf

    • SSDEEP

      1536:pRiDgPf5BI5fNOMWrTyj+zeaeslDojOspkwISPMFMSqmznouy8O6Nuf51TQmQM2j:/8o5uNFYekwILqmLoutkTy27zU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks