Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

eb5b4ea1f4...c4.exe

windows7-x64

10

eb5b4ea1f4...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb5b4ea1f44bffa107fca1008f9491db5add89587b1b4b24daa056b717612dc4

  • Size

    356KB

  • Sample

    240509-gkwpladd5s

  • MD5

    3468afc908a38d751f5d49608af4eba4

  • SHA1

    6dc9c287167474e8a354890765b4ad2744913d23

  • SHA256

    eb5b4ea1f44bffa107fca1008f9491db5add89587b1b4b24daa056b717612dc4

  • SHA512

    23860dabe8336d34ccb213db07c76776ec7b49b3ad863422d22282bc63b58f8b833f4d97b15ac7c1866f3a4caa7c4067df066235626d9e6ec51df811121cf988

  • SSDEEP

    6144:VNWB6wpczM5EQpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMG2fg:VNY6w+7QpV6yYPMLnfBJKFbhDwBpV6yp

Score
10/10
persistence

Malware Config

Targets

    • Target

      eb5b4ea1f44bffa107fca1008f9491db5add89587b1b4b24daa056b717612dc4

    • Size

      356KB

    • MD5

      3468afc908a38d751f5d49608af4eba4

    • SHA1

      6dc9c287167474e8a354890765b4ad2744913d23

    • SHA256

      eb5b4ea1f44bffa107fca1008f9491db5add89587b1b4b24daa056b717612dc4

    • SHA512

      23860dabe8336d34ccb213db07c76776ec7b49b3ad863422d22282bc63b58f8b833f4d97b15ac7c1866f3a4caa7c4067df066235626d9e6ec51df811121cf988

    • SSDEEP

      6144:VNWB6wpczM5EQpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMG2fg:VNY6w+7QpV6yYPMLnfBJKFbhDwBpV6yp

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks