Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

59fbb02669...1a.exe

windows7-x64

10

59fbb02669...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59fbb02669fb30b369832a4c826ecbb509bacd16c1f15c709a23f7ae04ccb61a

  • Size

    235KB

  • Sample

    240706-1x6vwatgrm

  • MD5

    1a1fcee20df8f5d204cbb4ae11e54f96

  • SHA1

    9e508944230d1b9f697daa544f424f66e8bd61f5

  • SHA256

    59fbb02669fb30b369832a4c826ecbb509bacd16c1f15c709a23f7ae04ccb61a

  • SHA512

    7989d736e64a8cb4892223b2a6ad66d3c74c78dbd8e0b06cd05eec5c2686ec9b9ae96674fcd42a85638936be05513d04eb33a5a72f6ab880339f258c53a5f734

  • SSDEEP

    6144:KrbDYhkCqWiS71ieayjnwReD4l04BQ2yke6ILjQ:KrbDOkbWhieaynw0Ee42jk6LjQ

Score
10/10
ramnitbankerevasionspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      59fbb02669fb30b369832a4c826ecbb509bacd16c1f15c709a23f7ae04ccb61a

    • Size

      235KB

    • MD5

      1a1fcee20df8f5d204cbb4ae11e54f96

    • SHA1

      9e508944230d1b9f697daa544f424f66e8bd61f5

    • SHA256

      59fbb02669fb30b369832a4c826ecbb509bacd16c1f15c709a23f7ae04ccb61a

    • SHA512

      7989d736e64a8cb4892223b2a6ad66d3c74c78dbd8e0b06cd05eec5c2686ec9b9ae96674fcd42a85638936be05513d04eb33a5a72f6ab880339f258c53a5f734

    • SSDEEP

      6144:KrbDYhkCqWiS71ieayjnwReD4l04BQ2yke6ILjQ:KrbDOkbWhieaynw0Ee42jk6LjQ

    Score
    10/10
    ramnitbankerspywarestealertrojanupxwormevasion

    • Modifies firewall policy service

      evasion

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks