Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

efa66175cf...0N.exe

windows7-x64

10

efa66175cf...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efa66175cf3367c181ac59a698149890N.exe

  • Size

    3.2MB

  • Sample

    240822-be7a9atgkp

  • MD5

    efa66175cf3367c181ac59a698149890

  • SHA1

    a0a62773b39dc7ea26a19663b1f98e2f8df76969

  • SHA256

    dbc410a3ed9c9392f81e2f4d2b68de11b7ac79841a2ebf559c34aa538b6db8c3

  • SHA512

    13f7c6f47d49ea362c4b7689bb42014edf7f2068b0eca1f02a1637cd1aaa47a9af0d65e585994de364c31553f70ffc4b244727599aff584f0c766da3dbb9ba02

  • SSDEEP

    49152:tWdx4HDQNJL0VR6SgMt+k4RiP+RmXMjiINiMq95FoHVHNTQTEjT333TYe:9HDYsqiPRhINnq95FoHVBT333T1

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      efa66175cf3367c181ac59a698149890N.exe

    • Size

      3.2MB

    • MD5

      efa66175cf3367c181ac59a698149890

    • SHA1

      a0a62773b39dc7ea26a19663b1f98e2f8df76969

    • SHA256

      dbc410a3ed9c9392f81e2f4d2b68de11b7ac79841a2ebf559c34aa538b6db8c3

    • SHA512

      13f7c6f47d49ea362c4b7689bb42014edf7f2068b0eca1f02a1637cd1aaa47a9af0d65e585994de364c31553f70ffc4b244727599aff584f0c766da3dbb9ba02

    • SSDEEP

      49152:tWdx4HDQNJL0VR6SgMt+k4RiP+RmXMjiINiMq95FoHVHNTQTEjT333TYe:9HDYsqiPRhINnq95FoHVBT333T1

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks