Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bf797ed589...25.exe

windows7-x64

10

bf797ed589...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf797ed5890232be28b237cbd7ae1625

  • Size

    792KB

  • Sample

    240311-brx84sgh8t

  • MD5

    bf797ed5890232be28b237cbd7ae1625

  • SHA1

    607caad03abae8b382fe3a53fda9fc2552407f8f

  • SHA256

    50c75c8455a2ac619ccf62c800170457063733d8251f7dace9ecefd9f59fddb6

  • SHA512

    0c728dd72f8918659256984be9aa7bd742bfc6c011b7bba0fc83303cd652c6abd738aa266f69ecac5864e8e693ac6d17df03153a025819a9954b7d2d1dfafb6d

  • SSDEEP

    12288:UZWtI6RkjQYeZJys73dOvXDpNjNe8NeZJys73dOvXDpNjNe8hs/oCeZJys73dOvr:UuhajZeZJ8NI8NeZJ8NI8hO1eZJ8NI8r

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bf797ed5890232be28b237cbd7ae1625

    • Size

      792KB

    • MD5

      bf797ed5890232be28b237cbd7ae1625

    • SHA1

      607caad03abae8b382fe3a53fda9fc2552407f8f

    • SHA256

      50c75c8455a2ac619ccf62c800170457063733d8251f7dace9ecefd9f59fddb6

    • SHA512

      0c728dd72f8918659256984be9aa7bd742bfc6c011b7bba0fc83303cd652c6abd738aa266f69ecac5864e8e693ac6d17df03153a025819a9954b7d2d1dfafb6d

    • SSDEEP

      12288:UZWtI6RkjQYeZJys73dOvXDpNjNe8NeZJys73dOvXDpNjNe8hs/oCeZJys73dOvr:UuhajZeZJ8NI8NeZJ8NI8hO1eZJ8NI8r

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks