Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Nexus v2.2.0.exe

  • Size

    14.7MB

  • Sample

    240409-a9zn8ahb28

  • MD5

    9d3515d804748c2291c5025d0606c647

  • SHA1

    b88473d4d4a3c730d79e6b4200debc7c74251e45

  • SHA256

    9d77d8e588704dc8694395478a4bd44727d8bae25a1ec988f593ef20f7da4adb

  • SHA512

    5deb96e8da3cb2185df05f638d7ad4a42f4f92aff5efcfd177693a67a316b17678b165d7d3f7aa5b1800554d5dd39ce6f186b26956358ec9b9a7861ae2f50b87

  • SSDEEP

    393216:lo9GKTGAdRi7p9nGistTgOmeX3dnCLRhr7hb0oHtE/BBsc:lOdTGAL+bLA+e9nC9hrhRtEPsc

Score
7/10

Malware Config

Targets

    • Target

      Nexus v2.2.0.exe

    • Size

      14.7MB

    • MD5

      9d3515d804748c2291c5025d0606c647

    • SHA1

      b88473d4d4a3c730d79e6b4200debc7c74251e45

    • SHA256

      9d77d8e588704dc8694395478a4bd44727d8bae25a1ec988f593ef20f7da4adb

    • SHA512

      5deb96e8da3cb2185df05f638d7ad4a42f4f92aff5efcfd177693a67a316b17678b165d7d3f7aa5b1800554d5dd39ce6f186b26956358ec9b9a7861ae2f50b87

    • SSDEEP

      393216:lo9GKTGAdRi7p9nGistTgOmeX3dnCLRhr7hb0oHtE/BBsc:lOdTGAL+bLA+e9nC9hrhRtEPsc

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks