Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Trojan-Pro...rt.exe

windows7-x64

10

Trojan-Pro...rt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Proxy.Win32.Qukart.gen-2269e6a977fd45c6be3cde8a9afccad3edaf5461f1b27b9922bb7df8707db231

  • Size

    324KB

  • Sample

    240229-k6hlmscc5y

  • MD5

    ddd3f812933cef50b5ca35c7f18df809

  • SHA1

    543f2d2cdbf1ae690b15f8040692eaf88c677089

  • SHA256

    2269e6a977fd45c6be3cde8a9afccad3edaf5461f1b27b9922bb7df8707db231

  • SHA512

    7a4b0f7f485bd2abdb6465de50dd7fcadebf707b4041fb8b82fc3d2cd06554d36df6f78cd1196531eaf9a959b75e54448a570039341afa5ddc15f8a434cf0046

  • SSDEEP

    3072:rfQ/t0/1FcI483CrxdbMqlWGRdA6sQO56TQY2mEmjwCzAhjQjxNX+W5RK0:rfkt0/Rb3wbWGRdA6sQc/Y+mjwjOx5H

Score
10/10
persistence

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.gen-2269e6a977fd45c6be3cde8a9afccad3edaf5461f1b27b9922bb7df8707db231

    • Size

      324KB

    • MD5

      ddd3f812933cef50b5ca35c7f18df809

    • SHA1

      543f2d2cdbf1ae690b15f8040692eaf88c677089

    • SHA256

      2269e6a977fd45c6be3cde8a9afccad3edaf5461f1b27b9922bb7df8707db231

    • SHA512

      7a4b0f7f485bd2abdb6465de50dd7fcadebf707b4041fb8b82fc3d2cd06554d36df6f78cd1196531eaf9a959b75e54448a570039341afa5ddc15f8a434cf0046

    • SSDEEP

      3072:rfQ/t0/1FcI483CrxdbMqlWGRdA6sQO56TQY2mEmjwCzAhjQjxNX+W5RK0:rfkt0/Rb3wbWGRdA6sQc/Y+mjwjOx5H

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks