Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d877a69a70...1e.exe

windows7-x64

10

d877a69a70...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d877a69a7032f85f9f27161459e08218e62d051ca8c5f44e7cc4f6f6a13f6d1e

  • Size

    368KB

  • Sample

    240807-d5xkvazekp

  • MD5

    df2594528792bd0f4c8f3eecaf422164

  • SHA1

    35bdf47ab4aff204aaf6b1dc6e5dfd7634f3836d

  • SHA256

    d877a69a7032f85f9f27161459e08218e62d051ca8c5f44e7cc4f6f6a13f6d1e

  • SHA512

    50ec44f9763572e3939b4843936d88683ee2ef7f590ba9bb1e0881770b84d632b9f4ff3ab597be538aeae29bd8232bb0f9f437d21119a6e9a8a1894833affe40

  • SSDEEP

    6144:GDcX34W0eFITNlTjZXvEQo9dfJBEdKFckUQ/4TIHD4xutM3VOEIuV5t6R+0I/VzS:ex/tfT9XvEhdfJkKSkU3kHyuaRB5t6kO

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d877a69a7032f85f9f27161459e08218e62d051ca8c5f44e7cc4f6f6a13f6d1e

    • Size

      368KB

    • MD5

      df2594528792bd0f4c8f3eecaf422164

    • SHA1

      35bdf47ab4aff204aaf6b1dc6e5dfd7634f3836d

    • SHA256

      d877a69a7032f85f9f27161459e08218e62d051ca8c5f44e7cc4f6f6a13f6d1e

    • SHA512

      50ec44f9763572e3939b4843936d88683ee2ef7f590ba9bb1e0881770b84d632b9f4ff3ab597be538aeae29bd8232bb0f9f437d21119a6e9a8a1894833affe40

    • SSDEEP

      6144:GDcX34W0eFITNlTjZXvEQo9dfJBEdKFckUQ/4TIHD4xutM3VOEIuV5t6R+0I/VzS:ex/tfT9XvEhdfJkKSkU3kHyuaRB5t6kO

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks