Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5f0f2d4eea...c2.exe

windows7-x64

10

5f0f2d4eea...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f0f2d4eea75df010adcdcd1e5cf0bbc8ebac1e97c44af9e71b15992e9d6adc2

  • Size

    73KB

  • Sample

    240817-2wm7tasang

  • MD5

    a0a35ac8fc745beb857536411cb85fc4

  • SHA1

    21f46022ef07ff503370121455a301fe5ca81e6f

  • SHA256

    5f0f2d4eea75df010adcdcd1e5cf0bbc8ebac1e97c44af9e71b15992e9d6adc2

  • SHA512

    0bffe52356e84a540f467ccc4cbd5c7cf6536565ef4e50e65cc61e4b8792f648cb3cb8a7a8f9064115093c6fc45b354371ee7cdab7067bc57567c32e3337f278

  • SSDEEP

    1536:xJHRoFYc5NeeGqq4wP/AKB1s5YMkhohBM:xaYc5NeeGd4wPjKUAM

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      5f0f2d4eea75df010adcdcd1e5cf0bbc8ebac1e97c44af9e71b15992e9d6adc2

    • Size

      73KB

    • MD5

      a0a35ac8fc745beb857536411cb85fc4

    • SHA1

      21f46022ef07ff503370121455a301fe5ca81e6f

    • SHA256

      5f0f2d4eea75df010adcdcd1e5cf0bbc8ebac1e97c44af9e71b15992e9d6adc2

    • SHA512

      0bffe52356e84a540f467ccc4cbd5c7cf6536565ef4e50e65cc61e4b8792f648cb3cb8a7a8f9064115093c6fc45b354371ee7cdab7067bc57567c32e3337f278

    • SSDEEP

      1536:xJHRoFYc5NeeGqq4wP/AKB1s5YMkhohBM:xaYc5NeeGd4wPjKUAM

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks