Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

c7992e77f5...0N.exe

windows7-x64

10

c7992e77f5...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7992e77f55d3694d6ed0abb1f982140N.exe

  • Size

    144KB

  • Sample

    240829-evywlatbma

  • MD5

    c7992e77f55d3694d6ed0abb1f982140

  • SHA1

    a6d97c519c6704eb6106d77ec5f0be368f8e6705

  • SHA256

    cc50f507bea9f2fab321c2922ae853baf63bce10070c0fe94b25ff9219e167ca

  • SHA512

    115ac7ad40376935d9dac17c0a00b271a7d364f2d3d719bbba035a040a678bd0c395abdcd8aa1e0b8adf958b3d1039cfda7b9d9c9c55cc5bfd87d64de46524b8

  • SSDEEP

    1536:NTVK3P8+agjVr+IIexF9u3LcVH9ctz7DOEtOKA+ZKx65LIctBBvTt:5VK3P8jgAIPxF9u73tvDoAKx6l5BBvp

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      c7992e77f55d3694d6ed0abb1f982140N.exe

    • Size

      144KB

    • MD5

      c7992e77f55d3694d6ed0abb1f982140

    • SHA1

      a6d97c519c6704eb6106d77ec5f0be368f8e6705

    • SHA256

      cc50f507bea9f2fab321c2922ae853baf63bce10070c0fe94b25ff9219e167ca

    • SHA512

      115ac7ad40376935d9dac17c0a00b271a7d364f2d3d719bbba035a040a678bd0c395abdcd8aa1e0b8adf958b3d1039cfda7b9d9c9c55cc5bfd87d64de46524b8

    • SSDEEP

      1536:NTVK3P8+agjVr+IIexF9u3LcVH9ctz7DOEtOKA+ZKx65LIctBBvTt:5VK3P8jgAIPxF9u73tvDoAKx6l5BBvp

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks