Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

0c3480dd46...c9.dll

windows7-x64

10

0c3480dd46...c9.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c3480dd468d7b379e80f71f8389c8194b601e05e9dbca04d58e83aee507e1c9

  • Size

    422KB

  • Sample

    221106-1e7z8aegdr

  • MD5

    0ea3292d91c3ff540ee07e5605204e60

  • SHA1

    b6c36ae4c3bf39936501cedf0ee510508ac3b531

  • SHA256

    0c3480dd468d7b379e80f71f8389c8194b601e05e9dbca04d58e83aee507e1c9

  • SHA512

    e1b6ee7fdcc5aef39580de4aa403810e5ea403332d657142c2d3a7436c08efb073f55073c0b31408c0898dbb35798b492d38c72691bfae2a9d042bdf71858d6c

  • SSDEEP

    12288:j79qXvjRc5AoIY+NPUlWnVaKy3olgtErA:VqXvjRc5AoITcknAKm8g2k

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      0c3480dd468d7b379e80f71f8389c8194b601e05e9dbca04d58e83aee507e1c9

    • Size

      422KB

    • MD5

      0ea3292d91c3ff540ee07e5605204e60

    • SHA1

      b6c36ae4c3bf39936501cedf0ee510508ac3b531

    • SHA256

      0c3480dd468d7b379e80f71f8389c8194b601e05e9dbca04d58e83aee507e1c9

    • SHA512

      e1b6ee7fdcc5aef39580de4aa403810e5ea403332d657142c2d3a7436c08efb073f55073c0b31408c0898dbb35798b492d38c72691bfae2a9d042bdf71858d6c

    • SSDEEP

      12288:j79qXvjRc5AoIY+NPUlWnVaKy3olgtErA:VqXvjRc5AoITcknAKm8g2k

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks