Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

20c1d5f084...a3.exe

windows7-x64

10

20c1d5f084...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20c1d5f084d70a0768705510d2e7e0d73339169f0d8a7df2f525416c08c522a3

  • Size

    88KB

  • Sample

    240829-yqjewsycpa

  • MD5

    1ee03922ce2ffae2cfdc9ddf39bcb84d

  • SHA1

    ce89f4289b8dc653a8daf9ff0ffca556914e9207

  • SHA256

    20c1d5f084d70a0768705510d2e7e0d73339169f0d8a7df2f525416c08c522a3

  • SHA512

    67ef59128decc87e7f9003db464eb9f2a0407fffd655da4b3dd618d2d53c6a3f3bc5b3b3b5201f24cf3a6eea79eb4c26420d92c438b019f1c369fbe0488f6fb9

  • SSDEEP

    1536:XRbA5yxBOUMB35+hISm1waXbiN1jGaLsBOHw8lMlHSvh1pL1nouy8L:XVWIOZBLSm1RyjGEE8lsHSp1xtoutL

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      20c1d5f084d70a0768705510d2e7e0d73339169f0d8a7df2f525416c08c522a3

    • Size

      88KB

    • MD5

      1ee03922ce2ffae2cfdc9ddf39bcb84d

    • SHA1

      ce89f4289b8dc653a8daf9ff0ffca556914e9207

    • SHA256

      20c1d5f084d70a0768705510d2e7e0d73339169f0d8a7df2f525416c08c522a3

    • SHA512

      67ef59128decc87e7f9003db464eb9f2a0407fffd655da4b3dd618d2d53c6a3f3bc5b3b3b5201f24cf3a6eea79eb4c26420d92c438b019f1c369fbe0488f6fb9

    • SSDEEP

      1536:XRbA5yxBOUMB35+hISm1waXbiN1jGaLsBOHw8lMlHSvh1pL1nouy8L:XVWIOZBLSm1RyjGEE8lsHSp1xtoutL

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks