Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

91b3d17137...98.exe

windows7-x64

10

91b3d17137...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91b3d17137193d1dc90d5143b71ef14b835213308fb8cc0ae3734c54e4f65e98

  • Size

    242KB

  • Sample

    240507-3xwq1saa62

  • MD5

    1a027580fa8d7a0233d865c68eb1c1c5

  • SHA1

    04f7824c4798bb75fd890b777b14289fa8458053

  • SHA256

    91b3d17137193d1dc90d5143b71ef14b835213308fb8cc0ae3734c54e4f65e98

  • SHA512

    42bc3b8e1a99bbe40e569bf4bfd6057181f84b9f2258f80da7e75dc25a67687c6aa6c604b23c4dffb9a0e8a1983c2acc453462133bc122aff8bf2d952413a89a

  • SSDEEP

    3072:YTz6/fYyhIXnq2SV6V8ZLB6V16VKcWmjRrzKbKcWmjRrzK8VHkdYaM88KC:8z6Qq2SV66LB6X62UyHEYa0

Score
10/10
persistence

Malware Config

Targets

    • Target

      91b3d17137193d1dc90d5143b71ef14b835213308fb8cc0ae3734c54e4f65e98

    • Size

      242KB

    • MD5

      1a027580fa8d7a0233d865c68eb1c1c5

    • SHA1

      04f7824c4798bb75fd890b777b14289fa8458053

    • SHA256

      91b3d17137193d1dc90d5143b71ef14b835213308fb8cc0ae3734c54e4f65e98

    • SHA512

      42bc3b8e1a99bbe40e569bf4bfd6057181f84b9f2258f80da7e75dc25a67687c6aa6c604b23c4dffb9a0e8a1983c2acc453462133bc122aff8bf2d952413a89a

    • SSDEEP

      3072:YTz6/fYyhIXnq2SV6V8ZLB6V16VKcWmjRrzKbKcWmjRrzK8VHkdYaM88KC:8z6Qq2SV66LB6X62UyHEYa0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks