Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

20a9da2959...3a.exe

windows7-x64

10

20a9da2959...3a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20a9da29591c786ebf2d42b4fde052cdf317e4ad073433ca951e32d3fffeed3a

  • Size

    109KB

  • Sample

    240921-xww3hayfnq

  • MD5

    b84457ea677ab04559e45ffd3839c82c

  • SHA1

    e64731fe650b46f20c3ff1b2e0cac3f646c2b962

  • SHA256

    20a9da29591c786ebf2d42b4fde052cdf317e4ad073433ca951e32d3fffeed3a

  • SHA512

    ff118ad0f495b581c4dc9389cdb658181a59c8f340c41033a1acee7c63f16e5afe156a2ea3dffe22270ea0d2e52f0fb7cf2af74e30fda7a80dd5de31548c4c12

  • SSDEEP

    3072:GuHYvfgQsdyLfUGaN8fo3PXl9Z7S/yCsKh2EzZA/z:dHE9/aNgo35e/yCthvUz

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      20a9da29591c786ebf2d42b4fde052cdf317e4ad073433ca951e32d3fffeed3a

    • Size

      109KB

    • MD5

      b84457ea677ab04559e45ffd3839c82c

    • SHA1

      e64731fe650b46f20c3ff1b2e0cac3f646c2b962

    • SHA256

      20a9da29591c786ebf2d42b4fde052cdf317e4ad073433ca951e32d3fffeed3a

    • SHA512

      ff118ad0f495b581c4dc9389cdb658181a59c8f340c41033a1acee7c63f16e5afe156a2ea3dffe22270ea0d2e52f0fb7cf2af74e30fda7a80dd5de31548c4c12

    • SSDEEP

      3072:GuHYvfgQsdyLfUGaN8fo3PXl9Z7S/yCsKh2EzZA/z:dHE9/aNgo35e/yCthvUz

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks