Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

nades.py

windows10-2004-x64

3

nades.py

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nades.py

  • Size

    5KB

  • Sample

    240516-hplkvsgh3w

  • MD5

    443578df89dacb5da5452eae6a7762d2

  • SHA1

    4722c25b48e57c2e47496144c0fb9ae859f14b8b

  • SHA256

    4fb64071ceca9a617c6726bf10992e032e3bba2f177aaf04959e86ddf8119294

  • SHA512

    57635320e81e5fb86c111887f5f85005662fff3ac7bb841c8dffa8f7af5bd8f41ff926b4347d8b2f181951dcd546e99352e3c7d1ba785d835fb3fa023ec09422

  • SSDEEP

    96:Aix+px+zE//x+YpfFEB25npeiede9eyeae3eDeweyengJefVdcYA6fE1Rpr1CxgB:ASELzfFP81Y4l9OyXlGKFsxIxg2WdTM2

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      nades.py

    • Size

      5KB

    • MD5

      443578df89dacb5da5452eae6a7762d2

    • SHA1

      4722c25b48e57c2e47496144c0fb9ae859f14b8b

    • SHA256

      4fb64071ceca9a617c6726bf10992e032e3bba2f177aaf04959e86ddf8119294

    • SHA512

      57635320e81e5fb86c111887f5f85005662fff3ac7bb841c8dffa8f7af5bd8f41ff926b4347d8b2f181951dcd546e99352e3c7d1ba785d835fb3fa023ec09422

    • SSDEEP

      96:Aix+px+zE//x+YpfFEB25npeiede9eyeae3eDeweyengJefVdcYA6fE1Rpr1CxgB:ASELzfFP81Y4l9OyXlGKFsxIxg2WdTM2

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks