Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

94eed138dd...80.dll

windows7-x64

10

94eed138dd...80.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94eed138dd1d5bfc0096ce68fab320f9c19715c2b80e28389de2d459cccaa980

  • Size

    212KB

  • Sample

    221107-vmpwqahbd3

  • MD5

    049faf33ba7c114d745d210b9135c0a2

  • SHA1

    499cb0addab8ba34f9f3123f70778033db8e88df

  • SHA256

    94eed138dd1d5bfc0096ce68fab320f9c19715c2b80e28389de2d459cccaa980

  • SHA512

    f47b54a4aa762a3c3c6ad4b736f301b105840ca00249d89d83e8766f4e9145164a04b791629ea9c22b9d52e7bba503f7d0af04bafea121602f03794b11c9a17e

  • SSDEEP

    3072:wgKKuiX63bw5dNjDh8pWVgTlFIYntSUDONp/kYxXUKBAUCkHhDW:hKZp3KNjVGv0Tp/kYxXUPeRW

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      94eed138dd1d5bfc0096ce68fab320f9c19715c2b80e28389de2d459cccaa980

    • Size

      212KB

    • MD5

      049faf33ba7c114d745d210b9135c0a2

    • SHA1

      499cb0addab8ba34f9f3123f70778033db8e88df

    • SHA256

      94eed138dd1d5bfc0096ce68fab320f9c19715c2b80e28389de2d459cccaa980

    • SHA512

      f47b54a4aa762a3c3c6ad4b736f301b105840ca00249d89d83e8766f4e9145164a04b791629ea9c22b9d52e7bba503f7d0af04bafea121602f03794b11c9a17e

    • SSDEEP

      3072:wgKKuiX63bw5dNjDh8pWVgTlFIYntSUDONp/kYxXUKBAUCkHhDW:hKZp3KNjVGv0Tp/kYxXUPeRW

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks