Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

LawlXD.py

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LawlXD.py

  • Size

    56KB

  • Sample

    240516-tdm54acd84

  • MD5

    80dace7dc9f9a438b5ae6df6adbd7095

  • SHA1

    0d38c98c8284ffaeab26371a2945e4dacf111ef3

  • SHA256

    fe9ef7f761540315d625bbcf281ebe27e82d5196a689af4355bae485a437ae5c

  • SHA512

    e6d2ea6c3c8011174d899cb4d73a605403aa01113810371e278734a4f1a44f6636514744d0938f884c26dd9baae215fe00e70539e59dbe2417b13a619f8bb7b3

  • SSDEEP

    768:DyZjTPvvTIcgDCy6NhTuTzGpi+uLF/I3tbhdKPvcHrcTa61SXE:DyZjTPvvTIDDCRNhCTGi+sWtbfsTa61z

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      LawlXD.py

    • Size

      56KB

    • MD5

      80dace7dc9f9a438b5ae6df6adbd7095

    • SHA1

      0d38c98c8284ffaeab26371a2945e4dacf111ef3

    • SHA256

      fe9ef7f761540315d625bbcf281ebe27e82d5196a689af4355bae485a437ae5c

    • SHA512

      e6d2ea6c3c8011174d899cb4d73a605403aa01113810371e278734a4f1a44f6636514744d0938f884c26dd9baae215fe00e70539e59dbe2417b13a619f8bb7b3

    • SSDEEP

      768:DyZjTPvvTIcgDCy6NhTuTzGpi+uLF/I3tbhdKPvcHrcTa61SXE:DyZjTPvvTIDDCRNhCTGi+sWtbfsTa61z

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks