Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cca0384b21...11.exe

windows7-x64

10

cca0384b21...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cca0384b2179bf67b70358b1edf13e11

  • Size

    6.5MB

  • Sample

    240316-andvmafb51

  • MD5

    cca0384b2179bf67b70358b1edf13e11

  • SHA1

    fb8bc308f5f0e783ae980cdb76f4c2c495f24d65

  • SHA256

    71a7ca489219cf9fbcdb43402b4218ce7f70c27d94c09be9b21754bcb404b6c6

  • SHA512

    6d172b744a25973d45478e1943176648826033c07226ee2c346242ca81cde90a16ba5f51e18716b8210197d8be6caee05158d76e119a67b5640ca28ca5ed179f

  • SSDEEP

    196608:or2Cr2Nr2Cr2Nr2Cr2hr2Cr2hr2Cr2hr2Cr2hr2Cr28:G2s2t2s2t2s2p2s2p2s2p2s2p2s28

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cca0384b2179bf67b70358b1edf13e11

    • Size

      6.5MB

    • MD5

      cca0384b2179bf67b70358b1edf13e11

    • SHA1

      fb8bc308f5f0e783ae980cdb76f4c2c495f24d65

    • SHA256

      71a7ca489219cf9fbcdb43402b4218ce7f70c27d94c09be9b21754bcb404b6c6

    • SHA512

      6d172b744a25973d45478e1943176648826033c07226ee2c346242ca81cde90a16ba5f51e18716b8210197d8be6caee05158d76e119a67b5640ca28ca5ed179f

    • SSDEEP

      196608:or2Cr2Nr2Cr2Nr2Cr2hr2Cr2hr2Cr2hr2Cr2hr2Cr28:G2s2t2s2t2s2p2s2p2s2p2s2p2s28

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks