Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

49cb37f992...0N.exe

windows7-x64

10

49cb37f992...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49cb37f9928f9db26427aa90c8767b20N.exe

  • Size

    109KB

  • Sample

    240822-swmfvavald

  • MD5

    49cb37f9928f9db26427aa90c8767b20

  • SHA1

    f3eff7b9bc9a6c1857a9527d8f6495e643360955

  • SHA256

    fc0c817f4dcae4bced2b2461e64a16083625914668a45279c2d32e19d2d0d321

  • SHA512

    4cdbef0d7f768aec7c2d2488a5cdc03eb6c5c2b8e76db5ed9c4c11229f7a6650c869e2a727ddfa45d44a620a21e37c8ef2b950425361ad56fac7546ba29cf453

  • SSDEEP

    3072:rSXPTDFlQFk2Fuq3Xn9J9cLCqwzBu1DjHLMVDqqkSp:ivFlJ2P3X9J9kwtu1DjrFqh

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      49cb37f9928f9db26427aa90c8767b20N.exe

    • Size

      109KB

    • MD5

      49cb37f9928f9db26427aa90c8767b20

    • SHA1

      f3eff7b9bc9a6c1857a9527d8f6495e643360955

    • SHA256

      fc0c817f4dcae4bced2b2461e64a16083625914668a45279c2d32e19d2d0d321

    • SHA512

      4cdbef0d7f768aec7c2d2488a5cdc03eb6c5c2b8e76db5ed9c4c11229f7a6650c869e2a727ddfa45d44a620a21e37c8ef2b950425361ad56fac7546ba29cf453

    • SSDEEP

      3072:rSXPTDFlQFk2Fuq3Xn9J9cLCqwzBu1DjHLMVDqqkSp:ivFlJ2P3X9J9kwtu1DjrFqh

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks