Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

lws110_x64.exe

windows7-x64

8

Resubmissions

28/04/2024, 19:25

240428-x48q9sfa95 8

28/04/2024, 18:48

240428-xfrsvaec46 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lws110_x64.exe

  • Size

    51.1MB

  • Sample

    240428-x48q9sfa95

  • MD5

    8756b799be8b2f7b73f8f7231cb0a33a

  • SHA1

    8e9b0cf258b79590a8cbbb0df44d0775b0e742ad

  • SHA256

    14849d81f2800f56090e0db57937fb1bc77744a69a30df91e212186fb873f23e

  • SHA512

    ec2f8d06b245d14f170b2204d24c6da8007920fec070f48936d034ab01b0c49ca935f1697fa7b278d3a32becfbeeb20b088d7c324bc302804c1b26db53639959

  • SSDEEP

    1572864:aOSabL9nvPr2rNVUvcGsk7oNXAHDkf+EEgbGCX0CeqHMXoG5:jRL972rNRaklHf+ebGCXSuMF

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      lws110_x64.exe

    • Size

      51.1MB

    • MD5

      8756b799be8b2f7b73f8f7231cb0a33a

    • SHA1

      8e9b0cf258b79590a8cbbb0df44d0775b0e742ad

    • SHA256

      14849d81f2800f56090e0db57937fb1bc77744a69a30df91e212186fb873f23e

    • SHA512

      ec2f8d06b245d14f170b2204d24c6da8007920fec070f48936d034ab01b0c49ca935f1697fa7b278d3a32becfbeeb20b088d7c324bc302804c1b26db53639959

    • SSDEEP

      1572864:aOSabL9nvPr2rNVUvcGsk7oNXAHDkf+EEgbGCX0CeqHMXoG5:jRL972rNRaklHf+ebGCXSuMF

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks