Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3511f46e5a...91.exe

windows7-x64

10

3511f46e5a...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3511f46e5a8756eb55109c119413b5a403a6a4b48a034517263932006bcd5391

  • Size

    199KB

  • Sample

    240602-zfybqsec5v

  • MD5

    9fb28fbd3e062a1f91cf45004d2f796b

  • SHA1

    bbe609bacd8179b61b22da7a9dcd172b71505d95

  • SHA256

    3511f46e5a8756eb55109c119413b5a403a6a4b48a034517263932006bcd5391

  • SHA512

    16ecae84da06a6b33ec52abf60373a163fbb354352124211558ae2a0013b7807f70cddedd78c888f624dc0d6180685926df2dbdfa27bd88a1c0ab52c67c02c90

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4Pmu1:7vEN2U+T6i5LirrllHy4HUcMQY6j

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3511f46e5a8756eb55109c119413b5a403a6a4b48a034517263932006bcd5391

    • Size

      199KB

    • MD5

      9fb28fbd3e062a1f91cf45004d2f796b

    • SHA1

      bbe609bacd8179b61b22da7a9dcd172b71505d95

    • SHA256

      3511f46e5a8756eb55109c119413b5a403a6a4b48a034517263932006bcd5391

    • SHA512

      16ecae84da06a6b33ec52abf60373a163fbb354352124211558ae2a0013b7807f70cddedd78c888f624dc0d6180685926df2dbdfa27bd88a1c0ab52c67c02c90

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4Pmu1:7vEN2U+T6i5LirrllHy4HUcMQY6j

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks