Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

5c71860b53...87.dll

windows7-x64

8

5c71860b53...87.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c71860b53748f5cc3ff9ce9c75d0935490df4da64719fdc5b911f801513cb87

  • Size

    216KB

  • Sample

    240328-hrhxracf74

  • MD5

    16501b724c568899632215d75db5b25f

  • SHA1

    6dc4cfccce75f2a3d221a354b0fd003b9e263f8d

  • SHA256

    5c71860b53748f5cc3ff9ce9c75d0935490df4da64719fdc5b911f801513cb87

  • SHA512

    376ec7897601de6cd9a1da350baaf9d5adf0447ece159c007fe05a3a871fa3fd2a0c9c42249cad28da39e17d65cbd92615a88466bcd07b1fef62f901ac6301fc

  • SSDEEP

    3072:ynk6ZvS0KmKAakQXMVRAgv7TA+XImL2lQBV+UdE+rECWp7hK9eGg:yk6o00AavXMVfziqBV+UdvrEFp7hK9o

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      5c71860b53748f5cc3ff9ce9c75d0935490df4da64719fdc5b911f801513cb87

    • Size

      216KB

    • MD5

      16501b724c568899632215d75db5b25f

    • SHA1

      6dc4cfccce75f2a3d221a354b0fd003b9e263f8d

    • SHA256

      5c71860b53748f5cc3ff9ce9c75d0935490df4da64719fdc5b911f801513cb87

    • SHA512

      376ec7897601de6cd9a1da350baaf9d5adf0447ece159c007fe05a3a871fa3fd2a0c9c42249cad28da39e17d65cbd92615a88466bcd07b1fef62f901ac6301fc

    • SSDEEP

      3072:ynk6ZvS0KmKAakQXMVRAgv7TA+XImL2lQBV+UdE+rECWp7hK9eGg:yk6o00AavXMVfziqBV+UdvrEFp7hK9o

    Score
    8/10
    persistenceupx

    • Blocklisted process makes network request

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks