Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

5

9b92aae69e...cN.exe

windows7-x64

8

9b92aae69e...cN.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b92aae69e05af986818926585e9a6cb834aea767a32deb3f707d8e7b7c40a8cN

  • Size

    484KB

  • Sample

    241012-pfejhszdkf

  • MD5

    6c293e9084fc6c601eac168fff46fef0

  • SHA1

    17943ff8637a2e9cde913dbbf08d2d5f1955db4d

  • SHA256

    9b92aae69e05af986818926585e9a6cb834aea767a32deb3f707d8e7b7c40a8c

  • SHA512

    3564ea862113b5b4201a2ce52bbbcf8deb6754b87c9764d1b213aec4b7f5290e773fa82046d3738af569f65d39aeccab2af8c52b94089721a9701c0bba0eb738

  • SSDEEP

    6144:3F5GEy1w5zGiNbBvKI/tRCnFqrjoZK/GZWbE49fBDMhhoWtowWDGRIgVc5:37ryS5z//tRGFGEZK/G87Kewplg

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      9b92aae69e05af986818926585e9a6cb834aea767a32deb3f707d8e7b7c40a8cN

    • Size

      484KB

    • MD5

      6c293e9084fc6c601eac168fff46fef0

    • SHA1

      17943ff8637a2e9cde913dbbf08d2d5f1955db4d

    • SHA256

      9b92aae69e05af986818926585e9a6cb834aea767a32deb3f707d8e7b7c40a8c

    • SHA512

      3564ea862113b5b4201a2ce52bbbcf8deb6754b87c9764d1b213aec4b7f5290e773fa82046d3738af569f65d39aeccab2af8c52b94089721a9701c0bba0eb738

    • SSDEEP

      6144:3F5GEy1w5zGiNbBvKI/tRCnFqrjoZK/GZWbE49fBDMhhoWtowWDGRIgVc5:37ryS5z//tRGFGEZK/G87Kewplg

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks