Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

3a1024cabe...1N.exe

windows7-x64

10

3a1024cabe...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a1024cabe4458b882d722ca9563f7b0551280d0a264bcfc4947f888d4f66491N

  • Size

    19KB

  • Sample

    241003-3kc35swfje

  • MD5

    6103b71e8c01efb84c8673a6a83a6f20

  • SHA1

    bcf90b4b43c65198aa605e9bc9246658524e851e

  • SHA256

    3a1024cabe4458b882d722ca9563f7b0551280d0a264bcfc4947f888d4f66491

  • SHA512

    384a2af86b12398f7d27cf2f312f106df0bc1d510d313774337b7d75ce311629f2a12aac90ae43c9184950558176ef0658f00543067b8988bab86ecefac088f6

  • SSDEEP

    384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5x5+gY7lAt7BDf8:g5BOFKksO1mE9B77777J77c77c77c71S

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      3a1024cabe4458b882d722ca9563f7b0551280d0a264bcfc4947f888d4f66491N

    • Size

      19KB

    • MD5

      6103b71e8c01efb84c8673a6a83a6f20

    • SHA1

      bcf90b4b43c65198aa605e9bc9246658524e851e

    • SHA256

      3a1024cabe4458b882d722ca9563f7b0551280d0a264bcfc4947f888d4f66491

    • SHA512

      384a2af86b12398f7d27cf2f312f106df0bc1d510d313774337b7d75ce311629f2a12aac90ae43c9184950558176ef0658f00543067b8988bab86ecefac088f6

    • SSDEEP

      384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5x5+gY7lAt7BDf8:g5BOFKksO1mE9B77777J77c77c77c71S

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks