Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

41ccd38905...0N.exe

windows7-x64

10

41ccd38905...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41ccd38905ec14102b3f1863e008c220N.exe

  • Size

    2.9MB

  • Sample

    240721-bxnlvssdlc

  • MD5

    41ccd38905ec14102b3f1863e008c220

  • SHA1

    000abd1db229ecb30559aba3d34dc012cb680af1

  • SHA256

    74e5e3f697d9ab2d813a7c2ba9b2e9e91956ad91af45feb6c98851946e3b096c

  • SHA512

    bc2c3b8b99329b61b82a0622227cc9912bb0b34e129569307536f3e9423af096a593fa310148e8ab2bf832176fb95a8aa3225bed3a3e5e4ccc3b3e97cc254eea

  • SSDEEP

    49152:tGQ1IXUtz3UXyYAtehSSJEWFU3P5F06520twrKf5gRV6Cs7esM7ELNgZkuudpvXr:wl8zkXyPterEf7520KrjYCsY0geuubXr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      41ccd38905ec14102b3f1863e008c220N.exe

    • Size

      2.9MB

    • MD5

      41ccd38905ec14102b3f1863e008c220

    • SHA1

      000abd1db229ecb30559aba3d34dc012cb680af1

    • SHA256

      74e5e3f697d9ab2d813a7c2ba9b2e9e91956ad91af45feb6c98851946e3b096c

    • SHA512

      bc2c3b8b99329b61b82a0622227cc9912bb0b34e129569307536f3e9423af096a593fa310148e8ab2bf832176fb95a8aa3225bed3a3e5e4ccc3b3e97cc254eea

    • SSDEEP

      49152:tGQ1IXUtz3UXyYAtehSSJEWFU3P5F06520twrKf5gRV6Cs7esM7ELNgZkuudpvXr:wl8zkXyPterEf7520KrjYCsY0geuubXr

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks