Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

4132e397d7...0N.exe

windows7-x64

10

4132e397d7...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4132e397d7c7ab9a3fef03f4292f8470N.exe

  • Size

    768KB

  • Sample

    240806-cfnqzawdjm

  • MD5

    4132e397d7c7ab9a3fef03f4292f8470

  • SHA1

    feab87e31a003aef1deaa38c07fd4e5dac93d12e

  • SHA256

    140b16b8a5f2939874fcf5a0294eaef19e1dfb6549d0cd1f7216a4468571fd31

  • SHA512

    dcd681b06a9f41eb47b5d4096b8b8906ddd407efe242b5f1f1c56da5c225936d7c1f82abf863ff7507027febfce3f780cec35972542edf34329e6c6833c76732

  • SSDEEP

    12288:emlFvF6IvYvc6IveDVqvQ6IvTPh2kkkkK4kXkkkkkkkkl888888888888888888d:emlb3q5hPPh2kkkkK4kXkkkkkkkkH

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      4132e397d7c7ab9a3fef03f4292f8470N.exe

    • Size

      768KB

    • MD5

      4132e397d7c7ab9a3fef03f4292f8470

    • SHA1

      feab87e31a003aef1deaa38c07fd4e5dac93d12e

    • SHA256

      140b16b8a5f2939874fcf5a0294eaef19e1dfb6549d0cd1f7216a4468571fd31

    • SHA512

      dcd681b06a9f41eb47b5d4096b8b8906ddd407efe242b5f1f1c56da5c225936d7c1f82abf863ff7507027febfce3f780cec35972542edf34329e6c6833c76732

    • SSDEEP

      12288:emlFvF6IvYvc6IveDVqvQ6IvTPh2kkkkK4kXkkkkkkkkl888888888888888888d:emlb3q5hPPh2kkkkK4kXkkkkkkkkH

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks