Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

aa8cad00db...0N.exe

windows7-x64

10

aa8cad00db...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa8cad00db153904655f9c345bef4450N.exe

  • Size

    479KB

  • Sample

    240819-rfmw1asakr

  • MD5

    aa8cad00db153904655f9c345bef4450

  • SHA1

    a1abd849dcdc74f3f38f5e4d339ae84be812462b

  • SHA256

    8b3d2f66d224a52a4c2668170d052db119a7af8cada0a2ee06cd24b7657d139b

  • SHA512

    f883bf81716fbfba4b03c2f18229c9fea8bca574c2df0be5586441df62739a7c8b45ce0dcab911e437cc5eb026bcffb1dbe59b60b6c31895c23d810336e3a200

  • SSDEEP

    6144:U57ymU+sycRJ6EQnT2leTLgNPx33fpu2leTLg:G7youRJ6EQ6Q2drQ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      aa8cad00db153904655f9c345bef4450N.exe

    • Size

      479KB

    • MD5

      aa8cad00db153904655f9c345bef4450

    • SHA1

      a1abd849dcdc74f3f38f5e4d339ae84be812462b

    • SHA256

      8b3d2f66d224a52a4c2668170d052db119a7af8cada0a2ee06cd24b7657d139b

    • SHA512

      f883bf81716fbfba4b03c2f18229c9fea8bca574c2df0be5586441df62739a7c8b45ce0dcab911e437cc5eb026bcffb1dbe59b60b6c31895c23d810336e3a200

    • SSDEEP

      6144:U57ymU+sycRJ6EQnT2leTLgNPx33fpu2leTLg:G7youRJ6EQ6Q2drQ

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks