Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0bcf582795...c8.exe

windows7-x64

10

0bcf582795...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bcf5827957e1e9a23fce952e20fbfc8.exe

  • Size

    80KB

  • Sample

    231126-kmka5afh85

  • MD5

    0bcf5827957e1e9a23fce952e20fbfc8

  • SHA1

    9845c204c5233f35a6cd5c71e61fbf1f41236289

  • SHA256

    3feb1e11bc8f769398688eecb5f2031a5b19ac41de5f8b164c91a16ef55b290c

  • SHA512

    a070c39ce6b42f8c9b009c67bbd5d63aad8461d34256b1d64c1744d294a2d7c1588cfb8ca208598b7d91a2ddeb420456969dfac9b052ad3028295f258556b681

  • SSDEEP

    1536:JHEOmnjx9NlD9pFRtZ1BdJlxN5Vh9pFRtZ1BdxN5VhFRtZ1BdJl5Vh9pFRtZ1BdQ:JWx1DVDS5DSCopsIk

Score
10/10
persistence

Malware Config

Targets

    • Target

      0bcf5827957e1e9a23fce952e20fbfc8.exe

    • Size

      80KB

    • MD5

      0bcf5827957e1e9a23fce952e20fbfc8

    • SHA1

      9845c204c5233f35a6cd5c71e61fbf1f41236289

    • SHA256

      3feb1e11bc8f769398688eecb5f2031a5b19ac41de5f8b164c91a16ef55b290c

    • SHA512

      a070c39ce6b42f8c9b009c67bbd5d63aad8461d34256b1d64c1744d294a2d7c1588cfb8ca208598b7d91a2ddeb420456969dfac9b052ad3028295f258556b681

    • SSDEEP

      1536:JHEOmnjx9NlD9pFRtZ1BdJlxN5Vh9pFRtZ1BdxN5VhFRtZ1BdJl5Vh9pFRtZ1BdQ:JWx1DVDS5DSCopsIk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks