Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

12af138597...f6.exe

windows7-x64

10

12af138597...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12af1385978694e9bd6eee82aaf896b044203a5d8f9ed1de4c3c29e95bae48f6

  • Size

    120KB

  • Sample

    240825-xjgr2s1bln

  • MD5

    4fb38d7e3a0a7d96bf1840b88b58bdfe

  • SHA1

    274d676a07073e3c67ccbadd13b9f1367eabbda5

  • SHA256

    12af1385978694e9bd6eee82aaf896b044203a5d8f9ed1de4c3c29e95bae48f6

  • SHA512

    dc10c81334d89b1dafbb903e5eb137a7469502a3f4f90cbf1c29d275ae54b938a9695d96af72c245acfb6c6141d69396ebc7892bff2ff69495ec24776e2a6b04

  • SSDEEP

    3072:LzgPLS/6EeoLiue/7e7203H/6TC+qF1SsB1bw4AVRrd9:LzMLSiG+q79C81NBy9

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      12af1385978694e9bd6eee82aaf896b044203a5d8f9ed1de4c3c29e95bae48f6

    • Size

      120KB

    • MD5

      4fb38d7e3a0a7d96bf1840b88b58bdfe

    • SHA1

      274d676a07073e3c67ccbadd13b9f1367eabbda5

    • SHA256

      12af1385978694e9bd6eee82aaf896b044203a5d8f9ed1de4c3c29e95bae48f6

    • SHA512

      dc10c81334d89b1dafbb903e5eb137a7469502a3f4f90cbf1c29d275ae54b938a9695d96af72c245acfb6c6141d69396ebc7892bff2ff69495ec24776e2a6b04

    • SSDEEP

      3072:LzgPLS/6EeoLiue/7e7203H/6TC+qF1SsB1bw4AVRrd9:LzMLSiG+q79C81NBy9

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks