Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0433058e48...27.exe

windows7-x64

10

0433058e48...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0433058e48b56ea226ff11123a9666cb6a8a084340674458ad0174e24ff84627

  • Size

    226KB

  • Sample

    240319-vstf4aaa8t

  • MD5

    f56f96870fb0679f2953f2f6aa128d70

  • SHA1

    d7dfc945626f1699a3721d4a9f0be365ea2a8b98

  • SHA256

    0433058e48b56ea226ff11123a9666cb6a8a084340674458ad0174e24ff84627

  • SHA512

    b4b6a921201ae7faa855734fd9434b9f4c4dca1aa96d0b703f815fabd761ef0d1dc063eca23b3365f8a409d8174a9fd091279c8d6431ae6eefff6c08ebcdb3a6

  • SSDEEP

    3072:x2EWsTjc72EZTVJDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:x10qEZTVqxEtQtsEtb

Score
10/10
persistence

Malware Config

Targets

    • Target

      0433058e48b56ea226ff11123a9666cb6a8a084340674458ad0174e24ff84627

    • Size

      226KB

    • MD5

      f56f96870fb0679f2953f2f6aa128d70

    • SHA1

      d7dfc945626f1699a3721d4a9f0be365ea2a8b98

    • SHA256

      0433058e48b56ea226ff11123a9666cb6a8a084340674458ad0174e24ff84627

    • SHA512

      b4b6a921201ae7faa855734fd9434b9f4c4dca1aa96d0b703f815fabd761ef0d1dc063eca23b3365f8a409d8174a9fd091279c8d6431ae6eefff6c08ebcdb3a6

    • SSDEEP

      3072:x2EWsTjc72EZTVJDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:x10qEZTVqxEtQtsEtb

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks