Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e5dbc21786...f6.exe

windows7-x64

10

e5dbc21786...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5dbc217865da447aa7eac68d4f2ab587d0fd3837b8620a159678582d772bef6

  • Size

    360KB

  • Sample

    240629-eyhnsa1apg

  • MD5

    a8c28075666552ed17462bf939221491

  • SHA1

    3dca61a18e148264024ccf6f20946d837f7083bd

  • SHA256

    e5dbc217865da447aa7eac68d4f2ab587d0fd3837b8620a159678582d772bef6

  • SHA512

    ea461e8869aeb9c6ff0a741d64ba9659065f876406a845a1542ef044eda9dfd3f78cf4bd4ee6733aa9c728a27ad8a3d03ce0a393ef80693660ba9729117bbfdf

  • SSDEEP

    6144:JhjMU1ZCpX2/mnbzvdLaD6OkPgl6bmIjlQFxU:Jh4U/CpXImbzQD6OkPgl6bmIjKxU

Score
10/10
persistence

Malware Config

Targets

    • Target

      e5dbc217865da447aa7eac68d4f2ab587d0fd3837b8620a159678582d772bef6

    • Size

      360KB

    • MD5

      a8c28075666552ed17462bf939221491

    • SHA1

      3dca61a18e148264024ccf6f20946d837f7083bd

    • SHA256

      e5dbc217865da447aa7eac68d4f2ab587d0fd3837b8620a159678582d772bef6

    • SHA512

      ea461e8869aeb9c6ff0a741d64ba9659065f876406a845a1542ef044eda9dfd3f78cf4bd4ee6733aa9c728a27ad8a3d03ce0a393ef80693660ba9729117bbfdf

    • SSDEEP

      6144:JhjMU1ZCpX2/mnbzvdLaD6OkPgl6bmIjlQFxU:Jh4U/CpXImbzQD6OkPgl6bmIjKxU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks