Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

33857e703b...5f.dll

windows7-x64

8

33857e703b...5f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33857e703b65a87ecefb4624607b8b28a47d96540d641dd29ad20a3e7ca81d5f

  • Size

    96KB

  • Sample

    221121-m8faeabe7s

  • MD5

    0a4566c77cbd26c01b34d1d7e6637ff0

  • SHA1

    77a3a44c23d1767c130cd39d722ef0a592dd6857

  • SHA256

    33857e703b65a87ecefb4624607b8b28a47d96540d641dd29ad20a3e7ca81d5f

  • SHA512

    380635ef75177339b72bd1dee46925c1edd165ae6ab5f4889151638cf49ab0bc9084967044211b23d93ed83fbc86466951fe4e948f3f29e8f2353ccd970d0375

  • SSDEEP

    3072:qD/1QkfFFFnHLidQXdoTfnUC6l/lJCCwRzlGDF7Gq7:qDSQXd8fnp6l/L7wRzm

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      33857e703b65a87ecefb4624607b8b28a47d96540d641dd29ad20a3e7ca81d5f

    • Size

      96KB

    • MD5

      0a4566c77cbd26c01b34d1d7e6637ff0

    • SHA1

      77a3a44c23d1767c130cd39d722ef0a592dd6857

    • SHA256

      33857e703b65a87ecefb4624607b8b28a47d96540d641dd29ad20a3e7ca81d5f

    • SHA512

      380635ef75177339b72bd1dee46925c1edd165ae6ab5f4889151638cf49ab0bc9084967044211b23d93ed83fbc86466951fe4e948f3f29e8f2353ccd970d0375

    • SSDEEP

      3072:qD/1QkfFFFnHLidQXdoTfnUC6l/lJCCwRzlGDF7Gq7:qDSQXd8fnp6l/L7wRzm

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks