Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e83ecb4a31...0N.exe

windows7-x64

10

e83ecb4a31...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e83ecb4a313fc991a2a2981fa376e720N.exe

  • Size

    890KB

  • Sample

    240822-bzw11s1hpd

  • MD5

    e83ecb4a313fc991a2a2981fa376e720

  • SHA1

    665c72cbb2ede5f8782ef7a1c01bb471fead73b3

  • SHA256

    f9748c148b0b49cd0bd8b3fa6c1555ead047fea9aef807da3f17e4a28e410b08

  • SHA512

    08045fc64250e25788da78a8c117fc8b4048526af163b19c5a884ce3644036019a4816dac6dfd1114f60403e667282ff1720bec94bf4c1e0e7667f5d606717aa

  • SSDEEP

    6144:tvfrPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fKr2n0MO:tvC/Ng1/Nmr/Ng1/Nblt01PBNkEG

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      e83ecb4a313fc991a2a2981fa376e720N.exe

    • Size

      890KB

    • MD5

      e83ecb4a313fc991a2a2981fa376e720

    • SHA1

      665c72cbb2ede5f8782ef7a1c01bb471fead73b3

    • SHA256

      f9748c148b0b49cd0bd8b3fa6c1555ead047fea9aef807da3f17e4a28e410b08

    • SHA512

      08045fc64250e25788da78a8c117fc8b4048526af163b19c5a884ce3644036019a4816dac6dfd1114f60403e667282ff1720bec94bf4c1e0e7667f5d606717aa

    • SSDEEP

      6144:tvfrPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fKr2n0MO:tvC/Ng1/Nmr/Ng1/Nblt01PBNkEG

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks