Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

439170e3e3...8a.exe

windows7-x64

10

439170e3e3...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    439170e3e38484ce9b238e1a80be8841c0a3f96a21a5f7b66e12c934c4be528a

  • Size

    390KB

  • Sample

    240808-zjl3wazaml

  • MD5

    cf458d6ea539a1b26a77b9b2a9f8f916

  • SHA1

    c58751073c5de28796af72288946cb450bbfbc6a

  • SHA256

    439170e3e38484ce9b238e1a80be8841c0a3f96a21a5f7b66e12c934c4be528a

  • SHA512

    d012663100b50da3fd725374594977b04edfd7587dc2fa24338f61f1a4e5aeea12347b1f42e5fb69a6bd6d2bede7902dd9fd352a27639db6e6e1d050c8058855

  • SSDEEP

    3072:7mgSpOv9ngfgK62mHh6+bWQALHLQGAZzasJR/X4a+SFkVsYtTHTMT5NeVWmjjGF:7aORgkh6CbArLAZ26RQSFSTHAjhV

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      439170e3e38484ce9b238e1a80be8841c0a3f96a21a5f7b66e12c934c4be528a

    • Size

      390KB

    • MD5

      cf458d6ea539a1b26a77b9b2a9f8f916

    • SHA1

      c58751073c5de28796af72288946cb450bbfbc6a

    • SHA256

      439170e3e38484ce9b238e1a80be8841c0a3f96a21a5f7b66e12c934c4be528a

    • SHA512

      d012663100b50da3fd725374594977b04edfd7587dc2fa24338f61f1a4e5aeea12347b1f42e5fb69a6bd6d2bede7902dd9fd352a27639db6e6e1d050c8058855

    • SSDEEP

      3072:7mgSpOv9ngfgK62mHh6+bWQALHLQGAZzasJR/X4a+SFkVsYtTHTMT5NeVWmjjGF:7aORgkh6CbArLAZ26RQSFSTHAjhV

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks