Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Server.exe
-
Size
37KB
-
Sample
240113-zjmpeadghq
-
MD5
a1d98613743877e6909e48a7ef961f03
-
SHA1
d5060ec77aa7b90457fb4e0bcf13ed6d15be9f50
-
SHA256
68887219835e5a239f80790898cce4fa77ad3551bb131b71ebe7dc01303be047
-
SHA512
4d3039abe72a4617ba6b8c0ad2810e8448e21b8424abd7d798a5dd396e4bc3d18ee4b0a6379cdd122b4c9ecdec7812a266a15fad233ac39bded4c8091f4576f3
-
SSDEEP
384:u8GBkiyRnDNGRn5IyUvoIdf1bg/SuswxrAF+rMRTyN/0L+EcoinblneHQM3epzXO:RZ5M5jUvtdOaufxrM+rMRa8NuMjlt
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20231215-en
Malware Config
Extracted
njrat
im523
noob
127.0.0.1:5552
df4f4145ee2e48990df7a94a2e0f3561
-
reg_key
df4f4145ee2e48990df7a94a2e0f3561
-
splitter
|'|'|
Targets
-
-
Target
Server.exe
-
Size
37KB
-
MD5
a1d98613743877e6909e48a7ef961f03
-
SHA1
d5060ec77aa7b90457fb4e0bcf13ed6d15be9f50
-
SHA256
68887219835e5a239f80790898cce4fa77ad3551bb131b71ebe7dc01303be047
-
SHA512
4d3039abe72a4617ba6b8c0ad2810e8448e21b8424abd7d798a5dd396e4bc3d18ee4b0a6379cdd122b4c9ecdec7812a266a15fad233ac39bded4c8091f4576f3
-
SSDEEP
384:u8GBkiyRnDNGRn5IyUvoIdf1bg/SuswxrAF+rMRTyN/0L+EcoinblneHQM3epzXO:RZ5M5jUvtdOaufxrM+rMRa8NuMjlt
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1