Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bed5b3fc5d...63.exe

windows7-x64

10

bed5b3fc5d...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bed5b3fc5d66e195ac8439c9101cda240bae9037b073d8790b2bb1944fc20d63

  • Size

    373KB

  • Sample

    240409-cbk5aaed61

  • MD5

    de5ca1c8ae8d17cdf1325a553a9ab49c

  • SHA1

    064e73d5bbe85f592aeb9b526c6784838c25583f

  • SHA256

    bed5b3fc5d66e195ac8439c9101cda240bae9037b073d8790b2bb1944fc20d63

  • SHA512

    bbd421bd089c140d8a1b7bde2c1bbf11120e321f2a4e52382825890e198a1d0f9077a6aea0ae7ff9e2035a2adeb9433873453b57de569ca25cc09b705566ad59

  • SSDEEP

    6144:nvEN2U+T6i5LirrllHy4HUcMQY6nzGnEDdilYJOUYzGnEDdilYJOUd:vENN+T5xYrllrU7QY6zGnO8YJwGnO8YR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bed5b3fc5d66e195ac8439c9101cda240bae9037b073d8790b2bb1944fc20d63

    • Size

      373KB

    • MD5

      de5ca1c8ae8d17cdf1325a553a9ab49c

    • SHA1

      064e73d5bbe85f592aeb9b526c6784838c25583f

    • SHA256

      bed5b3fc5d66e195ac8439c9101cda240bae9037b073d8790b2bb1944fc20d63

    • SHA512

      bbd421bd089c140d8a1b7bde2c1bbf11120e321f2a4e52382825890e198a1d0f9077a6aea0ae7ff9e2035a2adeb9433873453b57de569ca25cc09b705566ad59

    • SSDEEP

      6144:nvEN2U+T6i5LirrllHy4HUcMQY6nzGnEDdilYJOUYzGnEDdilYJOUd:vENN+T5xYrllrU7QY6zGnO8YJwGnO8YR

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks