Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5899f5e11b...fc.exe

windows7-x64

10

5899f5e11b...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5899f5e11baeeeceaeb4f4c9303422d1a58560c03a37ad7f67669c1939fbc3fc

  • Size

    400KB

  • Sample

    240603-1q75csbc88

  • MD5

    35b869eb630611d2824a615110f0024e

  • SHA1

    b4a5c2fbe888a598a0c75a5388d0a9f9c63541f5

  • SHA256

    5899f5e11baeeeceaeb4f4c9303422d1a58560c03a37ad7f67669c1939fbc3fc

  • SHA512

    da5e88f91b4030811161ba3c3c957ccf196c0219d27b75f94aeb0cdccd98c568d352f8fcdabc9e0a95a49cc7d1ed62cc264fdb51c47f64c8e6da1a9d771372c6

  • SSDEEP

    6144:/UR5QOrndLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:8R5D5Rrgryg426RQagrkj

Score
10/10
persistence

Malware Config

Targets

    • Target

      5899f5e11baeeeceaeb4f4c9303422d1a58560c03a37ad7f67669c1939fbc3fc

    • Size

      400KB

    • MD5

      35b869eb630611d2824a615110f0024e

    • SHA1

      b4a5c2fbe888a598a0c75a5388d0a9f9c63541f5

    • SHA256

      5899f5e11baeeeceaeb4f4c9303422d1a58560c03a37ad7f67669c1939fbc3fc

    • SHA512

      da5e88f91b4030811161ba3c3c957ccf196c0219d27b75f94aeb0cdccd98c568d352f8fcdabc9e0a95a49cc7d1ed62cc264fdb51c47f64c8e6da1a9d771372c6

    • SSDEEP

      6144:/UR5QOrndLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:8R5D5Rrgryg426RQagrkj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks