Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

17859d0db5...0N.exe

windows7-x64

10

17859d0db5...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17859d0db568609bf1eff6412d9587c0N.exe

  • Size

    79KB

  • Sample

    240822-sby9xawark

  • MD5

    17859d0db568609bf1eff6412d9587c0

  • SHA1

    b04bcc87b30af6728e249dcea82da7b0efe60741

  • SHA256

    9d228a261a033af6a73e5e58ec99de3448b4dc9331eb2441679cc21cfa4c0ba1

  • SHA512

    af7f7fedde4bb589ce553ff84325500023667c96b3a1b82025401dc11dc552d083887a8e63065862d501032a137cbbeac5a04b522dd82c960597f771b1dea6c2

  • SSDEEP

    1536:zhemXD0vGGNvzMzyDjIp/KfRY39teBAidTesD5tpXTSTZrI1jHJZrR:zcmYuakp/KfO3/KbVlDDSTu1jHJ9R

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      17859d0db568609bf1eff6412d9587c0N.exe

    • Size

      79KB

    • MD5

      17859d0db568609bf1eff6412d9587c0

    • SHA1

      b04bcc87b30af6728e249dcea82da7b0efe60741

    • SHA256

      9d228a261a033af6a73e5e58ec99de3448b4dc9331eb2441679cc21cfa4c0ba1

    • SHA512

      af7f7fedde4bb589ce553ff84325500023667c96b3a1b82025401dc11dc552d083887a8e63065862d501032a137cbbeac5a04b522dd82c960597f771b1dea6c2

    • SSDEEP

      1536:zhemXD0vGGNvzMzyDjIp/KfRY39teBAidTesD5tpXTSTZrI1jHJZrR:zcmYuakp/KfO3/KbVlDDSTu1jHJ9R

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks