Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

KennedyRem...t4.exe

windows7-x64

7

KennedyRem...t4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KennedyRemoteSupport4.exe

  • Size

    261KB

  • Sample

    230614-v7nt6abh83

  • MD5

    bcd0a1b3180ba39d37e1a2869edb1d9d

  • SHA1

    044b546d6cd58ed0908dc9418a45c1d3d1feca59

  • SHA256

    493aa63079d4a7087ca1e3acb85a3018251407546b90f762264459ae34f28def

  • SHA512

    6cd461295114275ab995d4cadcbeb7416ae9d084b8527d8e2d939c1f3162940ca120c38ff1cbb2a89812a2be7cea403524159b681a0e43783177ca39186e14a1

  • SSDEEP

    6144:HvlAkAsl3DR2+Mq9zntr0eUkIiKTrD8R+E8clVxNGNaumRIg7+9vc:Kk5L2FqP6kInW+E8GVzGskRc

Score
7/10

Malware Config

Targets

    • Target

      KennedyRemoteSupport4.exe

    • Size

      261KB

    • MD5

      bcd0a1b3180ba39d37e1a2869edb1d9d

    • SHA1

      044b546d6cd58ed0908dc9418a45c1d3d1feca59

    • SHA256

      493aa63079d4a7087ca1e3acb85a3018251407546b90f762264459ae34f28def

    • SHA512

      6cd461295114275ab995d4cadcbeb7416ae9d084b8527d8e2d939c1f3162940ca120c38ff1cbb2a89812a2be7cea403524159b681a0e43783177ca39186e14a1

    • SSDEEP

      6144:HvlAkAsl3DR2+Mq9zntr0eUkIiKTrD8R+E8clVxNGNaumRIg7+9vc:Kk5L2FqP6kInW+E8GVzGskRc

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks