Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ef57a4d074...0N.exe

windows7-x64

10

ef57a4d074...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef57a4d074b6e37051ce9317cc2d06f0N

  • Size

    82KB

  • Sample

    240913-zkjzxaydkh

  • MD5

    ef57a4d074b6e37051ce9317cc2d06f0

  • SHA1

    d0a9697d4f48c0387b5e73d1d3bf3400a88d172f

  • SHA256

    1bdf993e05d10e0e18dbacda4135f247600802acd2800fc712f179146660584b

  • SHA512

    86b3654e3c63d647e81d05f335b18185826b02dd5a4b3a00cf60b1a56f3c58a38b957c419137d86c414b05477485f6dcc4d191656692755c0b7b35c68780d4e3

  • SSDEEP

    768:rZVy+DZ4mV+RMO2rhgFwuqCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlT+Xy5:Bamlu3hbBGy3G8nhMpHKvw816C

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ef57a4d074b6e37051ce9317cc2d06f0N

    • Size

      82KB

    • MD5

      ef57a4d074b6e37051ce9317cc2d06f0

    • SHA1

      d0a9697d4f48c0387b5e73d1d3bf3400a88d172f

    • SHA256

      1bdf993e05d10e0e18dbacda4135f247600802acd2800fc712f179146660584b

    • SHA512

      86b3654e3c63d647e81d05f335b18185826b02dd5a4b3a00cf60b1a56f3c58a38b957c419137d86c414b05477485f6dcc4d191656692755c0b7b35c68780d4e3

    • SSDEEP

      768:rZVy+DZ4mV+RMO2rhgFwuqCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlT+Xy5:Bamlu3hbBGy3G8nhMpHKvw816C

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks