Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

0a7181f637...63.dll

windows7-x64

10

0a7181f637...63.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a7181f637d631cc52f69213e2979970b805bb6fa2d8e741ff47447ae9ebbf63

  • Size

    496KB

  • Sample

    221030-dclymsacfj

  • MD5

    a2dfb9cea471297c7d8dea21beebfec0

  • SHA1

    c1ef354b9135e97b9e6ff7913de3293b5e6cd994

  • SHA256

    0a7181f637d631cc52f69213e2979970b805bb6fa2d8e741ff47447ae9ebbf63

  • SHA512

    72974a755d623282a82664c7863893ebd0aa96f8041319ffd0e9bb6eae08ea4b44ef963b5a3fa0f1131b2f060ee7d05dcf3f1271e3dd201e906e881ae1f2d3a0

  • SSDEEP

    12288:9ehnaNPpSVZmNxRCwnwm3W3OHIIf54bJsCfJshzF:9eh0PpS6NxNnwYeOHX6i0shz

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      0a7181f637d631cc52f69213e2979970b805bb6fa2d8e741ff47447ae9ebbf63

    • Size

      496KB

    • MD5

      a2dfb9cea471297c7d8dea21beebfec0

    • SHA1

      c1ef354b9135e97b9e6ff7913de3293b5e6cd994

    • SHA256

      0a7181f637d631cc52f69213e2979970b805bb6fa2d8e741ff47447ae9ebbf63

    • SHA512

      72974a755d623282a82664c7863893ebd0aa96f8041319ffd0e9bb6eae08ea4b44ef963b5a3fa0f1131b2f060ee7d05dcf3f1271e3dd201e906e881ae1f2d3a0

    • SSDEEP

      12288:9ehnaNPpSVZmNxRCwnwm3W3OHIIf54bJsCfJshzF:9eh0PpS6NxNnwYeOHX6i0shz

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks