Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

41f98d67e9...d2.exe

windows7-x64

9

41f98d67e9...d2.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41f98d67e9537ad119b3d181132bc00196708a5fc1cf76a5fd65cedef3037ad2.exe

  • Size

    104KB

  • Sample

    240531-krmbaade96

  • MD5

    41beeee2e36acf7c231ddd5b5956e38b

  • SHA1

    5b178def14f47eb7469cb98cf8b793e72ef72d49

  • SHA256

    41f98d67e9537ad119b3d181132bc00196708a5fc1cf76a5fd65cedef3037ad2

  • SHA512

    790fd24f3951ef3fdb8741fdfaa6c2bbd3ca18463b425747a5882013d07a1543ea7967647ea192d9e0dfd812a3180a6547a116c9acb2b9a2535e81e5bcdc3805

  • SSDEEP

    768:RVo0gkvyCr9ktojRMLorOylxVR075gNObwyBeI9TAAmn6Wl606TAAi1ESiMXg+T5:vgU7xQoBBrf07mdpIBF0vrgE+kAA

Score
9/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      41f98d67e9537ad119b3d181132bc00196708a5fc1cf76a5fd65cedef3037ad2.exe

    • Size

      104KB

    • MD5

      41beeee2e36acf7c231ddd5b5956e38b

    • SHA1

      5b178def14f47eb7469cb98cf8b793e72ef72d49

    • SHA256

      41f98d67e9537ad119b3d181132bc00196708a5fc1cf76a5fd65cedef3037ad2

    • SHA512

      790fd24f3951ef3fdb8741fdfaa6c2bbd3ca18463b425747a5882013d07a1543ea7967647ea192d9e0dfd812a3180a6547a116c9acb2b9a2535e81e5bcdc3805

    • SSDEEP

      768:RVo0gkvyCr9ktojRMLorOylxVR075gNObwyBeI9TAAmn6Wl606TAAi1ESiMXg+T5:vgU7xQoBBrf07mdpIBF0vrgE+kAA

    Score
    9/10
    discoveryevasionpersistence

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VirtualBox executables on disk

    • Drops file in Drivers directory

    • Looks for VMWare Tools registry key

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks