Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

d66f3d576d...9b.exe

windows7-x64

10

d66f3d576d...9b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d66f3d576d216843aa4a2aef507b16806ea325282ae0757c95d3d0ca51ad599b

  • Size

    283KB

  • Sample

    221126-2m3k5sag39

  • MD5

    8cb8710b7da5abf186990b0d20f9204a

  • SHA1

    361b362e201021c61c145f3ceee972b99217d135

  • SHA256

    d66f3d576d216843aa4a2aef507b16806ea325282ae0757c95d3d0ca51ad599b

  • SHA512

    76878d3447124456605a505de02d97710ac1c236b76bab7e1ab4ab70ffeceac6a3d466a562558f12762fe777147134c27589466e20f922cb2818dbd1bfb1a2f3

  • SSDEEP

    6144:3VuZKWcJp2gPf6CHcy2xU2/F6iadu6qSN44h+bXge5UX+JbAgS:wZup2gPyCbCy3rjN9+se5U

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      d66f3d576d216843aa4a2aef507b16806ea325282ae0757c95d3d0ca51ad599b

    • Size

      283KB

    • MD5

      8cb8710b7da5abf186990b0d20f9204a

    • SHA1

      361b362e201021c61c145f3ceee972b99217d135

    • SHA256

      d66f3d576d216843aa4a2aef507b16806ea325282ae0757c95d3d0ca51ad599b

    • SHA512

      76878d3447124456605a505de02d97710ac1c236b76bab7e1ab4ab70ffeceac6a3d466a562558f12762fe777147134c27589466e20f922cb2818dbd1bfb1a2f3

    • SSDEEP

      6144:3VuZKWcJp2gPf6CHcy2xU2/F6iadu6qSN44h+bXge5UX+JbAgS:wZup2gPyCbCy3rjN9+se5U

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks