Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6f18a49fef...0N.exe

windows7-x64

10

6f18a49fef...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f18a49fefcc0031efc428fa9f5c1ae0N.exe

  • Size

    422KB

  • Sample

    240821-r7hflavara

  • MD5

    6f18a49fefcc0031efc428fa9f5c1ae0

  • SHA1

    f19cc1eda0d3f81fae1804f7e85cb7e2c50fd0cc

  • SHA256

    7b8a90a507158c3ce2204597bf75de41f62d9a85040a7801c23c4f8174d1aa58

  • SHA512

    d85f949db4f4a8b429714e83d2dde62942ec50e839c5218e64005c296fd92d604e319f1f13622a1c965bac8256b3766c0d7d69644550391bba9cc0e5f3a96d0d

  • SSDEEP

    6144:dNJqnCUV+2babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:dHqC4GaXgA4XfczXgA4XA

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      6f18a49fefcc0031efc428fa9f5c1ae0N.exe

    • Size

      422KB

    • MD5

      6f18a49fefcc0031efc428fa9f5c1ae0

    • SHA1

      f19cc1eda0d3f81fae1804f7e85cb7e2c50fd0cc

    • SHA256

      7b8a90a507158c3ce2204597bf75de41f62d9a85040a7801c23c4f8174d1aa58

    • SHA512

      d85f949db4f4a8b429714e83d2dde62942ec50e839c5218e64005c296fd92d604e319f1f13622a1c965bac8256b3766c0d7d69644550391bba9cc0e5f3a96d0d

    • SSDEEP

      6144:dNJqnCUV+2babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:dHqC4GaXgA4XfczXgA4XA

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks