Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ceb6999177...f8.exe

windows7-x64

10

ceb6999177...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8

  • Size

    104KB

  • Sample

    240313-3gfpvsef86

  • MD5

    f2fdaf5d4cdf2933ca0f5f82496b109b

  • SHA1

    dd75040d87d4957288e760696b6afbecc49d9d4e

  • SHA256

    ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8

  • SHA512

    71d9aa5a5c3425a2d32adfd96beeec2fea446c0a9fcb390742698a153ae4bd9ee7922eb5838afc572a71c568054f2a0d2da5208aee15b634608cb3df4f0782be

  • SSDEEP

    3072:zlw0aMmJN+pI4ZN4UiJe5Hx7cEGrhkngpDvchkqbAIQ:ZIH+pIM5Hx4brq2Ah

Score
10/10
persistence

Malware Config

Targets

    • Target

      ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8

    • Size

      104KB

    • MD5

      f2fdaf5d4cdf2933ca0f5f82496b109b

    • SHA1

      dd75040d87d4957288e760696b6afbecc49d9d4e

    • SHA256

      ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8

    • SHA512

      71d9aa5a5c3425a2d32adfd96beeec2fea446c0a9fcb390742698a153ae4bd9ee7922eb5838afc572a71c568054f2a0d2da5208aee15b634608cb3df4f0782be

    • SSDEEP

      3072:zlw0aMmJN+pI4ZN4UiJe5Hx7cEGrhkngpDvchkqbAIQ:ZIH+pIM5Hx4brq2Ah

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks