Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

af843099eb...e2.exe

windows7-x64

10

af843099eb...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af843099eb67363f9727b6a2a028e3145b536b3bf34b676abdf8d2a63c8e7de2

  • Size

    207KB

  • Sample

    240312-bhgvrsdf52

  • MD5

    44d05efdad6fae86e907c7662427f70e

  • SHA1

    4b1259dd6a883641ad39d202cd92a5e28108a6e2

  • SHA256

    af843099eb67363f9727b6a2a028e3145b536b3bf34b676abdf8d2a63c8e7de2

  • SHA512

    5e40d9ce0257a2c9eee8b8245acb6ba0257c53b6dd6a4d6ffe409ebe4007722f7cbd81771719157effe1c5865deecde99be3b7ee9bdbe52b150203309ee723cc

  • SSDEEP

    3072:wGuvHmSWf6TGAq+BOezpHw0MX2++9SEVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo23:xuOyTGAv92EVjj+VPj92d62ASOwj

Score
10/10
persistence

Malware Config

Targets

    • Target

      af843099eb67363f9727b6a2a028e3145b536b3bf34b676abdf8d2a63c8e7de2

    • Size

      207KB

    • MD5

      44d05efdad6fae86e907c7662427f70e

    • SHA1

      4b1259dd6a883641ad39d202cd92a5e28108a6e2

    • SHA256

      af843099eb67363f9727b6a2a028e3145b536b3bf34b676abdf8d2a63c8e7de2

    • SHA512

      5e40d9ce0257a2c9eee8b8245acb6ba0257c53b6dd6a4d6ffe409ebe4007722f7cbd81771719157effe1c5865deecde99be3b7ee9bdbe52b150203309ee723cc

    • SSDEEP

      3072:wGuvHmSWf6TGAq+BOezpHw0MX2++9SEVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo23:xuOyTGAv92EVjj+VPj92d62ASOwj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks