Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d99d6216d5...50.exe

windows7-x64

10

d99d6216d5...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d99d6216d5feb1045e9c0ee970e019e44a6aeb116e93ddcb84ba70467f0c5750

  • Size

    432KB

  • Sample

    240310-brxycagh21

  • MD5

    1b43762109845bdb7118c9419af9d2ba

  • SHA1

    0969bc98010be7ef18b65b8256857511a53023c4

  • SHA256

    d99d6216d5feb1045e9c0ee970e019e44a6aeb116e93ddcb84ba70467f0c5750

  • SHA512

    d96d61c531a2052c9a503c66287ec5bb34ea45f3ca44e9731c682d9b39ea3c81c26f037dc47370f604b5aa00ab20f905c041f3b90ad354002a73133db9ba28f2

  • SSDEEP

    6144:bXpsX/AGbM2yJT///NR5f7DM2y/JAQ///NR5fLYG3eujN:bXpjoM1z/NzDMTx/NcZc

Score
10/10
persistence

Malware Config

Targets

    • Target

      d99d6216d5feb1045e9c0ee970e019e44a6aeb116e93ddcb84ba70467f0c5750

    • Size

      432KB

    • MD5

      1b43762109845bdb7118c9419af9d2ba

    • SHA1

      0969bc98010be7ef18b65b8256857511a53023c4

    • SHA256

      d99d6216d5feb1045e9c0ee970e019e44a6aeb116e93ddcb84ba70467f0c5750

    • SHA512

      d96d61c531a2052c9a503c66287ec5bb34ea45f3ca44e9731c682d9b39ea3c81c26f037dc47370f604b5aa00ab20f905c041f3b90ad354002a73133db9ba28f2

    • SSDEEP

      6144:bXpsX/AGbM2yJT///NR5f7DM2y/JAQ///NR5fLYG3eujN:bXpjoM1z/NzDMTx/NcZc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks