Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    29325e9434dcbd5e040d96212d416c30N.exe

  • Size

    764KB

  • Sample

    240707-amvfzs1anc

  • MD5

    29325e9434dcbd5e040d96212d416c30

  • SHA1

    9b2ff47f8009bc0e33570ec8fe883f1755b9b9b4

  • SHA256

    ebabb4b85b8ffba0b9d80e689c5faff1edcc667b001beee3e90b731ad87c5f9d

  • SHA512

    289009e843884b0ef5748fa282aa43471b9d416e501c23627575aba11ac3f09d456cac555f95040435bc32272ef70f9333bcc10ffb5ef63677757bb5132fbb77

  • SSDEEP

    12288:cFUNDa8ZVB0oc0jf7d8ujeaVSobEcBZy1fm5cVsF:cFOa8ZVB0oc0jf2sSodyxmisF

Score
10/10

Malware Config

Targets

    • Target

      29325e9434dcbd5e040d96212d416c30N.exe

    • Size

      764KB

    • MD5

      29325e9434dcbd5e040d96212d416c30

    • SHA1

      9b2ff47f8009bc0e33570ec8fe883f1755b9b9b4

    • SHA256

      ebabb4b85b8ffba0b9d80e689c5faff1edcc667b001beee3e90b731ad87c5f9d

    • SHA512

      289009e843884b0ef5748fa282aa43471b9d416e501c23627575aba11ac3f09d456cac555f95040435bc32272ef70f9333bcc10ffb5ef63677757bb5132fbb77

    • SSDEEP

      12288:cFUNDa8ZVB0oc0jf7d8ujeaVSobEcBZy1fm5cVsF:cFOa8ZVB0oc0jf2sSodyxmisF

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks