Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

215efea3ff...ef.exe

windows7-x64

10

215efea3ff...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    215efea3ffe339185ae6a4c72fd5c9d93c97f3ee73e3b69338194ceefbceaeef

  • Size

    344KB

  • Sample

    240519-x9eelsea73

  • MD5

    1d706c2cac33894ca2892aace944d254

  • SHA1

    ee8f7ecf82dadd5500ad695d946c40fe464dd453

  • SHA256

    215efea3ffe339185ae6a4c72fd5c9d93c97f3ee73e3b69338194ceefbceaeef

  • SHA512

    4324b8f9c1758117f29b0b8b0edfb4014e35b81f080afdf00d7809510804b156fcff805f49bda6fe1db3b160babdd45af63eb50fd503ff9686d68354978582cb

  • SSDEEP

    6144:DD7n4WRoXQqCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:fLPopCpXImbzQD6OkPgl6bmIjKn

Score
10/10
persistence

Malware Config

Targets

    • Target

      215efea3ffe339185ae6a4c72fd5c9d93c97f3ee73e3b69338194ceefbceaeef

    • Size

      344KB

    • MD5

      1d706c2cac33894ca2892aace944d254

    • SHA1

      ee8f7ecf82dadd5500ad695d946c40fe464dd453

    • SHA256

      215efea3ffe339185ae6a4c72fd5c9d93c97f3ee73e3b69338194ceefbceaeef

    • SHA512

      4324b8f9c1758117f29b0b8b0edfb4014e35b81f080afdf00d7809510804b156fcff805f49bda6fe1db3b160babdd45af63eb50fd503ff9686d68354978582cb

    • SSDEEP

      6144:DD7n4WRoXQqCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:fLPopCpXImbzQD6OkPgl6bmIjKn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks