Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cfac9965fe...43.exe

windows7-x64

10

cfac9965fe...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfac9965fe30870fcd36be406550fc58bb81d6a7d5dc4844fcca80f60ede5543

  • Size

    406KB

  • Sample

    240824-etw1lssepe

  • MD5

    b27a248f24f1cde4f00c542d26e3c598

  • SHA1

    c040b9f2862c75b6df913c9fd9b3945279fa72c8

  • SHA256

    cfac9965fe30870fcd36be406550fc58bb81d6a7d5dc4844fcca80f60ede5543

  • SHA512

    89fd3f46e26ebb4a5b27b37ea6d97c8e962063839a8d0089e77af7002c5b4dfca4de371a801dbad18695431a840cd6712ebd8f3bf383b7ac107137a9d291c252

  • SSDEEP

    6144:alAjBcU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:yAjzMp3Ma3M3MvD3Mq3B3Mo3

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      cfac9965fe30870fcd36be406550fc58bb81d6a7d5dc4844fcca80f60ede5543

    • Size

      406KB

    • MD5

      b27a248f24f1cde4f00c542d26e3c598

    • SHA1

      c040b9f2862c75b6df913c9fd9b3945279fa72c8

    • SHA256

      cfac9965fe30870fcd36be406550fc58bb81d6a7d5dc4844fcca80f60ede5543

    • SHA512

      89fd3f46e26ebb4a5b27b37ea6d97c8e962063839a8d0089e77af7002c5b4dfca4de371a801dbad18695431a840cd6712ebd8f3bf383b7ac107137a9d291c252

    • SSDEEP

      6144:alAjBcU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:yAjzMp3Ma3M3MvD3Mq3B3Mo3

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks