Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c9b924e833...83.exe

windows7-x64

10

c9b924e833...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9b924e833a8196e85215a4de2b2dac97a615050e1542a483703011a3bcf7083

  • Size

    65KB

  • Sample

    240609-lf16qsgf8x

  • MD5

    aa531d6157cc02a3909d85d3f38a12c8

  • SHA1

    08cb365b3c3143eaae2236841f6f2aa0d33e8565

  • SHA256

    c9b924e833a8196e85215a4de2b2dac97a615050e1542a483703011a3bcf7083

  • SHA512

    64b0b10c7ab71e0084614d9967b2e80bbd45a8794adb2ad13f0449c12d0ef73c49e17f68408d035f9b773f690a3b1ba48290d642a32c9bf0b4391e218ee3fc28

  • SSDEEP

    1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oun:7WNqkOJWmo1HpM0MkTUmun

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c9b924e833a8196e85215a4de2b2dac97a615050e1542a483703011a3bcf7083

    • Size

      65KB

    • MD5

      aa531d6157cc02a3909d85d3f38a12c8

    • SHA1

      08cb365b3c3143eaae2236841f6f2aa0d33e8565

    • SHA256

      c9b924e833a8196e85215a4de2b2dac97a615050e1542a483703011a3bcf7083

    • SHA512

      64b0b10c7ab71e0084614d9967b2e80bbd45a8794adb2ad13f0449c12d0ef73c49e17f68408d035f9b773f690a3b1ba48290d642a32c9bf0b4391e218ee3fc28

    • SSDEEP

      1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oun:7WNqkOJWmo1HpM0MkTUmun

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks