Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

9daf66f000...48.exe

windows7-x64

10

9daf66f000...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9daf66f000b6897e6c4043d0c5ef4f59f34a479b9e70660a914cef19e7a26248

  • Size

    59KB

  • Sample

    240915-ahq8rsvdrp

  • MD5

    6214c5f9375c44bcedd5ec2664b85b09

  • SHA1

    b650a20e19fbbfb5ea7e5ea1eb8e449076082c49

  • SHA256

    9daf66f000b6897e6c4043d0c5ef4f59f34a479b9e70660a914cef19e7a26248

  • SHA512

    5d8960b5f89e877faeac0317b64da53dd386b8c3f5ab6552614d6a1da444ccee2377973726bb3466a0bcd9d25981af343933fc48f66f274491a83ebd0915bc3e

  • SSDEEP

    1536:+ZsJA/2oT7/krM4D9EyxoXQJWMkPCWm8gvfNCyVso:+Zam2oT7/kKrzgQeso

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      9daf66f000b6897e6c4043d0c5ef4f59f34a479b9e70660a914cef19e7a26248

    • Size

      59KB

    • MD5

      6214c5f9375c44bcedd5ec2664b85b09

    • SHA1

      b650a20e19fbbfb5ea7e5ea1eb8e449076082c49

    • SHA256

      9daf66f000b6897e6c4043d0c5ef4f59f34a479b9e70660a914cef19e7a26248

    • SHA512

      5d8960b5f89e877faeac0317b64da53dd386b8c3f5ab6552614d6a1da444ccee2377973726bb3466a0bcd9d25981af343933fc48f66f274491a83ebd0915bc3e

    • SSDEEP

      1536:+ZsJA/2oT7/krM4D9EyxoXQJWMkPCWm8gvfNCyVso:+Zam2oT7/kKrzgQeso

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks