Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

45.139.105...f9.exe

windows7-x64

8

45.139.105...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat

  • Size

    931KB

  • Sample

    221019-mv1desfhaq

  • MD5

    b5c6bf928455a865d23284c92ee0d6f9

  • SHA1

    d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b

  • SHA256

    80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6

  • SHA512

    86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc

  • SSDEEP

    24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat

    • Size

      931KB

    • MD5

      b5c6bf928455a865d23284c92ee0d6f9

    • SHA1

      d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b

    • SHA256

      80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6

    • SHA512

      86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc

    • SSDEEP

      24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0

    Score
    10/10
    persistencelgoogloaderdownloader

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks