Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8d395b4285...94.dll

windows7-x64

10

8d395b4285...94.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d395b42850b5491949047d0800c22666e378bd3590f9740dcfcbd2a4b161794

  • Size

    696KB

  • Sample

    221121-mr2gbaag8z

  • MD5

    3b0a0d3c7ae4ff73067e40596af89f70

  • SHA1

    1b2b1b8db3297e0dd50ceb74470fb50a34684cc2

  • SHA256

    8d395b42850b5491949047d0800c22666e378bd3590f9740dcfcbd2a4b161794

  • SHA512

    09cbf0d3af93ad681f139092abf97bc7da77026f8334bbe712cc0d9441e9af2c1d9122cf03e93ee0c62eb345fa97293846cdce3bd49383ed5346bb0646537711

  • SSDEEP

    12288:XehnaNPpSVZmNxRCwnwm3W3OHIIf5Ut/LbZ/QHBtSY12wpUYUMPik/w:Xeh0PpS6NxNnwYeOHXeZ/Z/EBtlprakI

Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      8d395b42850b5491949047d0800c22666e378bd3590f9740dcfcbd2a4b161794

    • Size

      696KB

    • MD5

      3b0a0d3c7ae4ff73067e40596af89f70

    • SHA1

      1b2b1b8db3297e0dd50ceb74470fb50a34684cc2

    • SHA256

      8d395b42850b5491949047d0800c22666e378bd3590f9740dcfcbd2a4b161794

    • SHA512

      09cbf0d3af93ad681f139092abf97bc7da77026f8334bbe712cc0d9441e9af2c1d9122cf03e93ee0c62eb345fa97293846cdce3bd49383ed5346bb0646537711

    • SSDEEP

      12288:XehnaNPpSVZmNxRCwnwm3W3OHIIf5Ut/LbZ/QHBtSY12wpUYUMPik/w:Xeh0PpS6NxNnwYeOHXeZ/Z/EBtlprakI

    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks