Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

4a5da1b949...02.dll

windows7-x64

10

4a5da1b949...02.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a5da1b9494470a4e3c88894e294104c5437df989456b1209764a5b444652d02

  • Size

    180KB

  • Sample

    221204-ct5awahc44

  • MD5

    b484124d84114eefed6e32e5b97de8a0

  • SHA1

    984c28db719cc975ad77f4e431e919b3cc7fc912

  • SHA256

    4a5da1b9494470a4e3c88894e294104c5437df989456b1209764a5b444652d02

  • SHA512

    438acc48ff2784f164ef49e33e5539fcd6d13b38289cac644f7339b9bf3a0f989e8d472c01fb6078e1b343a1ca90bf85322d4587bdd689aeb5c7e97422b31c88

  • SSDEEP

    3072:Kn4cV8gf2u41Z5tKl4xoaePShY+dWvVJQTUsqPa7sn3Dvo:w4y8gOl2dznvUIxa7UDvo

Score
10/10
ramnitbankerpersistencespywarestealertrojanupxworm

Malware Config

Targets

    • Target

      4a5da1b9494470a4e3c88894e294104c5437df989456b1209764a5b444652d02

    • Size

      180KB

    • MD5

      b484124d84114eefed6e32e5b97de8a0

    • SHA1

      984c28db719cc975ad77f4e431e919b3cc7fc912

    • SHA256

      4a5da1b9494470a4e3c88894e294104c5437df989456b1209764a5b444652d02

    • SHA512

      438acc48ff2784f164ef49e33e5539fcd6d13b38289cac644f7339b9bf3a0f989e8d472c01fb6078e1b343a1ca90bf85322d4587bdd689aeb5c7e97422b31c88

    • SSDEEP

      3072:Kn4cV8gf2u41Z5tKl4xoaePShY+dWvVJQTUsqPa7sn3Dvo:w4y8gOl2dznvUIxa7UDvo

    Score
    10/10
    ramnitbankerpersistencespywarestealertrojanupxworm

    • Modifies WinLogon for persistence

      persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks