Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7636fcdd3f...34.dll

windows7-x64

10

7636fcdd3f...34.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7636fcdd3f40e7407ed00e00f9ca3f329abba64eb461c38873a4610dae34f334

  • Size

    240KB

  • Sample

    221030-26mn2aeca6

  • MD5

    a10b05144aa44c696ddd051e3bf9f180

  • SHA1

    24a39bb841865cd4b597098fc9c7749309b6fe37

  • SHA256

    7636fcdd3f40e7407ed00e00f9ca3f329abba64eb461c38873a4610dae34f334

  • SHA512

    84e5a9f2ea47f989f036d397f27f148731e69191f6f9081096f1da5ad8bfc3698627ceacff68a6beda389aa3206b3192e3032a0413878b49597d1bdf414b3b68

  • SSDEEP

    3072:Zn4cV8gf2u41Z5tKlwqudua6aRVoFktlmRoUhD:N4y8gOl25Edkkt2oUhD

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      7636fcdd3f40e7407ed00e00f9ca3f329abba64eb461c38873a4610dae34f334

    • Size

      240KB

    • MD5

      a10b05144aa44c696ddd051e3bf9f180

    • SHA1

      24a39bb841865cd4b597098fc9c7749309b6fe37

    • SHA256

      7636fcdd3f40e7407ed00e00f9ca3f329abba64eb461c38873a4610dae34f334

    • SHA512

      84e5a9f2ea47f989f036d397f27f148731e69191f6f9081096f1da5ad8bfc3698627ceacff68a6beda389aa3206b3192e3032a0413878b49597d1bdf414b3b68

    • SSDEEP

      3072:Zn4cV8gf2u41Z5tKlwqudua6aRVoFktlmRoUhD:N4y8gOl25Edkkt2oUhD

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks