Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b038f114c83b27_JC.exe

windows7-x64

6

b038f114c83b27_JC.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b038f114c83b27_JC.exe

  • Size

    73KB

  • Sample

    230718-pk5w9sah2w

  • MD5

    b038f114c83b27924d5b1c4f46dfaf22

  • SHA1

    e848b1b3807bcf34a98694909a22090b042c4f31

  • SHA256

    0952c6d463619d7bd6975e205496264b8ab30dd5b235cf7d96e17aa736c88f5f

  • SHA512

    b3f4e3eef93943da0e3662bc17cbf5629958185b06a0d9b759ba40616a4a68ffdad047784a523072afb745850d29e3e522b2672d0364ca81d7efcbf78ae2ef28

  • SSDEEP

    1536:6555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:LMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

Score
10/10
gandcrabpersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      b038f114c83b27_JC.exe

    • Size

      73KB

    • MD5

      b038f114c83b27924d5b1c4f46dfaf22

    • SHA1

      e848b1b3807bcf34a98694909a22090b042c4f31

    • SHA256

      0952c6d463619d7bd6975e205496264b8ab30dd5b235cf7d96e17aa736c88f5f

    • SHA512

      b3f4e3eef93943da0e3662bc17cbf5629958185b06a0d9b759ba40616a4a68ffdad047784a523072afb745850d29e3e522b2672d0364ca81d7efcbf78ae2ef28

    • SSDEEP

      1536:6555555555555pmgSeGDjtQhnwmmB0yl4MqqU+2bbbAV2/S2mr3IdE8mne0Avu5+:LMSjOnrmBd4MqqDL2/mr3IdE8we0Avuj

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks