Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

43b8cf85b8...98.exe

windows7-x64

10

43b8cf85b8...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43b8cf85b8ac2d7fcc6b2c96ff8e7f575908268c8643792e6fce5577405e7c98

  • Size

    48KB

  • Sample

    240527-1fby6sag91

  • MD5

    df9ad5ca792662b258ce538de8763228

  • SHA1

    c6db87b0c97b49d588f3d3d5761c72a210635c02

  • SHA256

    43b8cf85b8ac2d7fcc6b2c96ff8e7f575908268c8643792e6fce5577405e7c98

  • SHA512

    540d048c01c3867976dc652c26ad298fe695f4cf626cd1557c54e7f19b49242b124760d6ffc4f689042525e437397e0876c0d8eb1eb4a580c044104e7bb3b494

  • SSDEEP

    768:jIUXzutynTIwtTVZ4mlK6apvtXBkTrTUDXTiU38O5r:jayMwtRamlK6apvtavYDXTiG5r

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      43b8cf85b8ac2d7fcc6b2c96ff8e7f575908268c8643792e6fce5577405e7c98

    • Size

      48KB

    • MD5

      df9ad5ca792662b258ce538de8763228

    • SHA1

      c6db87b0c97b49d588f3d3d5761c72a210635c02

    • SHA256

      43b8cf85b8ac2d7fcc6b2c96ff8e7f575908268c8643792e6fce5577405e7c98

    • SHA512

      540d048c01c3867976dc652c26ad298fe695f4cf626cd1557c54e7f19b49242b124760d6ffc4f689042525e437397e0876c0d8eb1eb4a580c044104e7bb3b494

    • SSDEEP

      768:jIUXzutynTIwtTVZ4mlK6apvtXBkTrTUDXTiU38O5r:jayMwtRamlK6apvtavYDXTiG5r

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks