Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

ef40057c0a...21.exe

windows7-x64

6

ef40057c0a...21.exe

windows7-x64

6

ef40057c0a...21.exe

windows10-1703-x64

6

ef40057c0a...21.exe

windows10-2004-x64

6

ef40057c0a...21.exe

windows11-21h2-x64

6

Resubmissions

26/04/2024, 06:47

240426-hkqc9aba9v 6

26/04/2024, 06:47

240426-hkprqabb44 6

26/04/2024, 06:47

240426-hkn57abb42 6

26/04/2024, 06:47

240426-hkmx5aba9t 6

26/04/2024, 06:47

240426-hkmmcsba81 6

25/04/2024, 13:14

240425-qgyt8aba6y 7

Analysis

  • max time kernel
    1751s
  • max time network
    1753s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    26/04/2024, 06:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521.exe

  • Size

    131KB

  • MD5

    fa158ba3d7801e203da61c7eafa12a13

  • SHA1

    eb71f862c7603797a9d7d46bda545f7d9280f451

  • SHA256

    ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521

  • SHA512

    0f47c06526cb8d0e8302e440baac91e49e1fa3541e8d86e724c46dcc3b4ba2ffae445b3d217d58cb8ff66380036b98e82fc7b6f3980120d4c599d5497ce5edd1

  • SSDEEP

    1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImz2:BLxUyjp3xCTyDMsUWyw+Ubx7NX

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Uses Tor communications 1 TTPs

    Malware can proxy its traffic through Tor for more anonymity.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521.exe
    "C:\Users\Admin\AppData\Local\Temp\ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521.exe"
    1⤵
    • Adds Run key to start application
    PID:4360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\cached-consensus
    Filesize

    2.8MB

    MD5

    4604dc0e5ff1bcba92a11e2d763669e8

    SHA1

    05d7ca333373ffac8a5b647a3cde79ee3d12adce

    SHA256

    d4b739503fee471cb5f79559cf02fc3f573f21cd95cd6b0373a6552866e202fc

    SHA512

    2b27b30c899c3e1edbf88db591bce5ba8198848e9cc94dfee8eedeb60ded566eea7c762691d4129654e4930fdb4672acbfd0b2c75563ee08cad4aedc9aab63dd

    Download Submit