Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

646c7002a8...1c.dll

windows7-x64

10

646c7002a8...1c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    646c7002a82c6d5b8bd9f224e877c4d8d6a5f432f7b58e633e9471c9284db61c

  • Size

    156KB

  • Sample

    221003-fj2c1sggd8

  • MD5

    4d4f1d9e2db1d04a106cbeb303bb0c70

  • SHA1

    e9c1c4be62efeecc1680e7845c70a73d06ac8218

  • SHA256

    646c7002a82c6d5b8bd9f224e877c4d8d6a5f432f7b58e633e9471c9284db61c

  • SHA512

    fa73381f920476283783dda4fcca82b9e70d724f2eca1152aa66af4068eec18e54fd83f0a4c8f7062b894be6be233b616496bec64271aef49f76e0afb7300851

  • SSDEEP

    3072:42UxPvVKNiNz1a2JRC+Tq/KAYDDJUHF4kh7C9FbYX:zGvQ4Nx9RHTVL129G+

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      646c7002a82c6d5b8bd9f224e877c4d8d6a5f432f7b58e633e9471c9284db61c

    • Size

      156KB

    • MD5

      4d4f1d9e2db1d04a106cbeb303bb0c70

    • SHA1

      e9c1c4be62efeecc1680e7845c70a73d06ac8218

    • SHA256

      646c7002a82c6d5b8bd9f224e877c4d8d6a5f432f7b58e633e9471c9284db61c

    • SHA512

      fa73381f920476283783dda4fcca82b9e70d724f2eca1152aa66af4068eec18e54fd83f0a4c8f7062b894be6be233b616496bec64271aef49f76e0afb7300851

    • SSDEEP

      3072:42UxPvVKNiNz1a2JRC+Tq/KAYDDJUHF4kh7C9FbYX:zGvQ4Nx9RHTVL129G+

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks