Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

Trojan-Ran...er.exe

windows7-x64

10

Trojan-Ran...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.Blocker.ileg-e9aee8f9dd43c0459ddb5613ad9a9dd9beba596b7195b7a955b9017565e48c0e

  • Size

    71KB

  • Sample

    221107-ck246acfb3

  • MD5

    2c01b97d12b86e19729f980cba99f644

  • SHA1

    57ef48c7faa4635bdab85bd0daaa99e629f18aa9

  • SHA256

    e9aee8f9dd43c0459ddb5613ad9a9dd9beba596b7195b7a955b9017565e48c0e

  • SHA512

    758de0a48eba9d75eb1807d08c2e9389be6ca360f2ce0397b11dee71824744fa2e137bf8454e61524744ce0cb0c1daad12fc317b2fc65d18373928d94dabd3d6

  • SSDEEP

    1536:44YWPLyatHC6vInAe0IQo6hYf1zwQVgvXg:4FWGaFRvIAe0IQK1zwLvX

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Ransom.Win32.Blocker.ileg-e9aee8f9dd43c0459ddb5613ad9a9dd9beba596b7195b7a955b9017565e48c0e

    • Size

      71KB

    • MD5

      2c01b97d12b86e19729f980cba99f644

    • SHA1

      57ef48c7faa4635bdab85bd0daaa99e629f18aa9

    • SHA256

      e9aee8f9dd43c0459ddb5613ad9a9dd9beba596b7195b7a955b9017565e48c0e

    • SHA512

      758de0a48eba9d75eb1807d08c2e9389be6ca360f2ce0397b11dee71824744fa2e137bf8454e61524744ce0cb0c1daad12fc317b2fc65d18373928d94dabd3d6

    • SSDEEP

      1536:44YWPLyatHC6vInAe0IQo6hYf1zwQVgvXg:4FWGaFRvIAe0IQK1zwLvX

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks