Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

127b36f523...bf.exe

windows7-x64

10

127b36f523...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    127b36f5238fe4efd23bff17ca986464be154dd8a016e6e324927a27a04b30bf

  • Size

    416KB

  • Sample

    240515-xna53aeg9w

  • MD5

    cbb4cedf2931f89ddda76ac509f83b60

  • SHA1

    ab0033f25846e17f7a3a8eb9bb890ba6e456f527

  • SHA256

    127b36f5238fe4efd23bff17ca986464be154dd8a016e6e324927a27a04b30bf

  • SHA512

    9022388d2fd41ef71cd8f655f0c329328ae66a77aac9526d41e8fa755a757bfd8779e9045b067e69bc1a533808b6f0799695dfda6fb2ca60537f3988247da386

  • SSDEEP

    3072:+MCQJAO0OomrRgDLCNqTVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:BCA1JRgiqTRs+HLlD0rN2ZwVht740PP

Score
10/10
persistence

Malware Config

Targets

    • Target

      127b36f5238fe4efd23bff17ca986464be154dd8a016e6e324927a27a04b30bf

    • Size

      416KB

    • MD5

      cbb4cedf2931f89ddda76ac509f83b60

    • SHA1

      ab0033f25846e17f7a3a8eb9bb890ba6e456f527

    • SHA256

      127b36f5238fe4efd23bff17ca986464be154dd8a016e6e324927a27a04b30bf

    • SHA512

      9022388d2fd41ef71cd8f655f0c329328ae66a77aac9526d41e8fa755a757bfd8779e9045b067e69bc1a533808b6f0799695dfda6fb2ca60537f3988247da386

    • SSDEEP

      3072:+MCQJAO0OomrRgDLCNqTVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:BCA1JRgiqTRs+HLlD0rN2ZwVht740PP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks