Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e9dcd42b60...cc.exe

windows7-x64

10

e9dcd42b60...cc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9dcd42b60e33d3efde730381c641e918e84f121008ca7adbaf0bc3b0b6f28cc

  • Size

    145KB

  • Sample

    240703-exbtva1dmj

  • MD5

    d62d123c4be210702681d6fb964a8148

  • SHA1

    1a4cd2e69cb67d0b37efccd9bee0a33600b8d4a8

  • SHA256

    e9dcd42b60e33d3efde730381c641e918e84f121008ca7adbaf0bc3b0b6f28cc

  • SHA512

    84bf4b1d31d706c8c0b4a1d69f7c4b94c893eb8b3333267e5566f5550b0e899266bce7372016ad6aeb8183a1aeec8e6cf301067f836db718a4b6c38a92ade2b3

  • SSDEEP

    3072:zr9ToM9/ZHoopvqD3pFBEV52Ae5aFnVB:hoM9hIivc5Id

Score
10/10
persistence

Malware Config

Targets

    • Target

      e9dcd42b60e33d3efde730381c641e918e84f121008ca7adbaf0bc3b0b6f28cc

    • Size

      145KB

    • MD5

      d62d123c4be210702681d6fb964a8148

    • SHA1

      1a4cd2e69cb67d0b37efccd9bee0a33600b8d4a8

    • SHA256

      e9dcd42b60e33d3efde730381c641e918e84f121008ca7adbaf0bc3b0b6f28cc

    • SHA512

      84bf4b1d31d706c8c0b4a1d69f7c4b94c893eb8b3333267e5566f5550b0e899266bce7372016ad6aeb8183a1aeec8e6cf301067f836db718a4b6c38a92ade2b3

    • SSDEEP

      3072:zr9ToM9/ZHoopvqD3pFBEV52Ae5aFnVB:hoM9hIivc5Id

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks