Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

f9c174dda7...20.exe

windows7-x64

10

f9c174dda7...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9c174dda7ca1b4f29b67c185e51b9bc6b4b2058507eb698f2e8db9af2d01a20

  • Size

    96KB

  • Sample

    240417-g9kzdsfh29

  • MD5

    21871d3eb76b1058ac004979259953d5

  • SHA1

    c09efda48622992b99d7896b338ef1ee611efaa5

  • SHA256

    f9c174dda7ca1b4f29b67c185e51b9bc6b4b2058507eb698f2e8db9af2d01a20

  • SHA512

    cba9955738357dd9ca4146e1c25908fa59d32a2af2f4355496393e1cfd6263a756a9617ad6b40210727074a6e336bfaea33cee557073081860ecd8ae579f9978

  • SSDEEP

    1536:ah2cwpQEz931SK5IdKmu/LXI+SSi5gKlljl88G/BOmWCMy0QiLiizHNQNdq:a8HRh3R5INEIgKllj+5OmWCMyELiAHOi

Score
10/10
persistence

Malware Config

Targets

    • Target

      f9c174dda7ca1b4f29b67c185e51b9bc6b4b2058507eb698f2e8db9af2d01a20

    • Size

      96KB

    • MD5

      21871d3eb76b1058ac004979259953d5

    • SHA1

      c09efda48622992b99d7896b338ef1ee611efaa5

    • SHA256

      f9c174dda7ca1b4f29b67c185e51b9bc6b4b2058507eb698f2e8db9af2d01a20

    • SHA512

      cba9955738357dd9ca4146e1c25908fa59d32a2af2f4355496393e1cfd6263a756a9617ad6b40210727074a6e336bfaea33cee557073081860ecd8ae579f9978

    • SSDEEP

      1536:ah2cwpQEz931SK5IdKmu/LXI+SSi5gKlljl88G/BOmWCMy0QiLiizHNQNdq:a8HRh3R5INEIgKllj+5OmWCMyELiAHOi

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks