Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0928f36599b47ba66582d1f5a5cb6fb0N.exe
-
Size
23KB
-
Sample
240716-azamcazcpc
-
MD5
0928f36599b47ba66582d1f5a5cb6fb0
-
SHA1
bef519e4db670bbea44d8cba6cbf104050ae551d
-
SHA256
7833bf16b7c7c64dff43ca86f7ef1119284cedbc43fc7c31184d531b17e6bbf0
-
SHA512
edf35a5457744d7792c8d4ea5d99e8e3beecef2a516a18f0296891d6f4baf3bf543cf00ba63a11aac5ad18af2567aa8781e840e339d80097d8e7a2e837b8ca3e
-
SSDEEP
384:/oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI2:Y7O89p2rRpcnuY
Behavioral task
behavioral1
Sample
0928f36599b47ba66582d1f5a5cb6fb0N.exe
Resource
win7-20240704-en
Malware Config
Extracted
njrat
0.7d
HacKed
10.10.1.11:5552
7657c14284185fbd3fb108b43c7467ba
-
reg_key
7657c14284185fbd3fb108b43c7467ba
-
splitter
|'|'|
Targets
-
-
Target
0928f36599b47ba66582d1f5a5cb6fb0N.exe
-
Size
23KB
-
MD5
0928f36599b47ba66582d1f5a5cb6fb0
-
SHA1
bef519e4db670bbea44d8cba6cbf104050ae551d
-
SHA256
7833bf16b7c7c64dff43ca86f7ef1119284cedbc43fc7c31184d531b17e6bbf0
-
SHA512
edf35a5457744d7792c8d4ea5d99e8e3beecef2a516a18f0296891d6f4baf3bf543cf00ba63a11aac5ad18af2567aa8781e840e339d80097d8e7a2e837b8ca3e
-
SSDEEP
384:/oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI2:Y7O89p2rRpcnuY
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1