Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ec13473c94e2b5677ad9dd83ce95ac18_JC.exe

  • Size

    465KB

  • Sample

    231011-q4jntaag81

  • MD5

    ec13473c94e2b5677ad9dd83ce95ac18

  • SHA1

    a84e12984733d0151919e449170836bbe19c7468

  • SHA256

    3f0d48cced9258eabf3af126fa250748ddb336767b6be8aa8bc007a58e12d710

  • SHA512

    40c965801ad7116c4f7d97b1fbe3aee0abb409ebb129d01a6f1921c9645e1060e7200bec93d20338711cbc86731715835c22a936f00e9cf01f0c4d2d3abd31b5

  • SSDEEP

    6144:JxqiRcjN+R8u3k5nTY7PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383m:uiRcX/Ng1/Nmr/Ng1/NSf

Score
10/10

Malware Config

Targets

    • Target

      ec13473c94e2b5677ad9dd83ce95ac18_JC.exe

    • Size

      465KB

    • MD5

      ec13473c94e2b5677ad9dd83ce95ac18

    • SHA1

      a84e12984733d0151919e449170836bbe19c7468

    • SHA256

      3f0d48cced9258eabf3af126fa250748ddb336767b6be8aa8bc007a58e12d710

    • SHA512

      40c965801ad7116c4f7d97b1fbe3aee0abb409ebb129d01a6f1921c9645e1060e7200bec93d20338711cbc86731715835c22a936f00e9cf01f0c4d2d3abd31b5

    • SSDEEP

      6144:JxqiRcjN+R8u3k5nTY7PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383m:uiRcX/Ng1/Nmr/Ng1/NSf

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks