Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

IriunWebcam-2.8.4.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IriunWebcam-2.8.4.exe

  • Size

    3.9MB

  • Sample

    240224-h294zsdg3t

  • MD5

    2743f081c2a4369f0a50fca6ac035d13

  • SHA1

    8a4968da973dead25a678404bf2e6772b09381f5

  • SHA256

    2f0a2fae5dd7a296a92a58906a100b66575912d90254770e4bfb8923623ec26a

  • SHA512

    e48ad69fdb83efdc0d8a79aaacc783fcf1be305a8d8628e8888114a275fa8333cc92539045b63878bf9da63300feabce0d5d87b0668fb3e07d893902cb638c19

  • SSDEEP

    98304:NkLPf34mxE/CO7+wFws3ZWaPPkRqM48wAPdv0e4gWoJ0Rh:+PfImLqisY0SRv0e4gHJmh

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      IriunWebcam-2.8.4.exe

    • Size

      3.9MB

    • MD5

      2743f081c2a4369f0a50fca6ac035d13

    • SHA1

      8a4968da973dead25a678404bf2e6772b09381f5

    • SHA256

      2f0a2fae5dd7a296a92a58906a100b66575912d90254770e4bfb8923623ec26a

    • SHA512

      e48ad69fdb83efdc0d8a79aaacc783fcf1be305a8d8628e8888114a275fa8333cc92539045b63878bf9da63300feabce0d5d87b0668fb3e07d893902cb638c19

    • SSDEEP

      98304:NkLPf34mxE/CO7+wFws3ZWaPPkRqM48wAPdv0e4gWoJ0Rh:+PfImLqisY0SRv0e4gHJmh

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks