Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    18ba91db872f1303e6a009ea4f82f390_exe32_JC.exe

  • Size

    98KB

  • Sample

    231015-wbdvrabh53

  • MD5

    18ba91db872f1303e6a009ea4f82f390

  • SHA1

    5cff8b77ee29e2920b25f18cea7bb1b3b85e0bd4

  • SHA256

    e6d22f17d51bea9660233c8caae8b7133bcd3da146941cfd5ee4de7aca895e95

  • SHA512

    5aaf1bd1f0b8de2b7481097429abad4928ab9387ba83ee8509639110cf694178b201fa8d194a25e86a3e0366b5d682a2a03b61617c4239cafc4c075670bc692c

  • SSDEEP

    3072:PQ1HaXlDT8pScfn+XavKj6nIEHeFKPD375lHzpa1P:PwaXlDTsScmXavKjpEHeYr75lHzpaF

Score
10/10

Malware Config

Targets

    • Target

      18ba91db872f1303e6a009ea4f82f390_exe32_JC.exe

    • Size

      98KB

    • MD5

      18ba91db872f1303e6a009ea4f82f390

    • SHA1

      5cff8b77ee29e2920b25f18cea7bb1b3b85e0bd4

    • SHA256

      e6d22f17d51bea9660233c8caae8b7133bcd3da146941cfd5ee4de7aca895e95

    • SHA512

      5aaf1bd1f0b8de2b7481097429abad4928ab9387ba83ee8509639110cf694178b201fa8d194a25e86a3e0366b5d682a2a03b61617c4239cafc4c075670bc692c

    • SSDEEP

      3072:PQ1HaXlDT8pScfn+XavKj6nIEHeFKPD375lHzpa1P:PwaXlDTsScmXavKjpEHeYr75lHzpaF

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks