Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

01b92e1c0e...0N.exe

windows7-x64

10

01b92e1c0e...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01b92e1c0ecc32d25b0d4f5ad56975b0N.exe

  • Size

    229KB

  • Sample

    240706-lkkdsathnn

  • MD5

    01b92e1c0ecc32d25b0d4f5ad56975b0

  • SHA1

    4ab26e7be3203a1526158564cfb49058a357ea06

  • SHA256

    f356ccd70a499262abc927729c0bc8a9d6d71bf3859b81a7a1c154bef567746f

  • SHA512

    16bcdbcd0f56b199fc32ac4376e3647193c4d957a8a10509cc7a7934d774926d6ef68c0c179d59865c0ce345984bfec8850f09a8e4ce8d881a08e9d39ecbf560

  • SSDEEP

    6144:htWwDICvAHS271+HZ/pvkym/89bYEwPhCKvav:htWwDICYP7AIfFfvav

Score
10/10
persistence

Malware Config

Targets

    • Target

      01b92e1c0ecc32d25b0d4f5ad56975b0N.exe

    • Size

      229KB

    • MD5

      01b92e1c0ecc32d25b0d4f5ad56975b0

    • SHA1

      4ab26e7be3203a1526158564cfb49058a357ea06

    • SHA256

      f356ccd70a499262abc927729c0bc8a9d6d71bf3859b81a7a1c154bef567746f

    • SHA512

      16bcdbcd0f56b199fc32ac4376e3647193c4d957a8a10509cc7a7934d774926d6ef68c0c179d59865c0ce345984bfec8850f09a8e4ce8d881a08e9d39ecbf560

    • SSDEEP

      6144:htWwDICvAHS271+HZ/pvkym/89bYEwPhCKvav:htWwDICYP7AIfFfvav

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks