Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9df086ba1898d2c0c811a5fc2267f2e0N.exe
-
Size
685KB
-
Sample
240716-lhx7vsydld
-
MD5
9df086ba1898d2c0c811a5fc2267f2e0
-
SHA1
b8a99b34be6604c2e78ef88e2aee175d802a70d3
-
SHA256
9fd13df8486c02e33997bfa3c8821eb52f77a76d436e63d8e9e5372da641a465
-
SHA512
3367151eb7ae66f41f1a70946cdcf92d146292badf840b7d7c2981d6f1ba6865920f320dfea46adf7418ff84c0c9e2b2a2bad500a137e046e0ec138f01edacb8
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQVRpVnl3Bg5oiNIr2NOpzuwiKm:v6Zv2ivhBVnFvh5Q44+iisxpzE
Behavioral task
behavioral1
Sample
9df086ba1898d2c0c811a5fc2267f2e0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9df086ba1898d2c0c811a5fc2267f2e0N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
9df086ba1898d2c0c811a5fc2267f2e0N.exe
-
Size
685KB
-
MD5
9df086ba1898d2c0c811a5fc2267f2e0
-
SHA1
b8a99b34be6604c2e78ef88e2aee175d802a70d3
-
SHA256
9fd13df8486c02e33997bfa3c8821eb52f77a76d436e63d8e9e5372da641a465
-
SHA512
3367151eb7ae66f41f1a70946cdcf92d146292badf840b7d7c2981d6f1ba6865920f320dfea46adf7418ff84c0c9e2b2a2bad500a137e046e0ec138f01edacb8
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQVRpVnl3Bg5oiNIr2NOpzuwiKm:v6Zv2ivhBVnFvh5Q44+iisxpzE
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1