Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4910c00dafada374e07428a5d6c590f0N.exe

  • Size

    2.5MB

  • Sample

    240824-thw9kazcqq

  • MD5

    4910c00dafada374e07428a5d6c590f0

  • SHA1

    5bf03fb0500d7f1e0d78057b7e9c7b1b93f3ff48

  • SHA256

    a21bbab5fced0b7598dc42e3944c221e47f4fc896b940838b087c2b351defcde

  • SHA512

    e986876f1d79fdc85493e5611d77387baee00e21fa26a7c5fd0687f20d7d623f67ceb65619c1919a0cf433be4aefa4d5155910f5846f3d7b8ee09b334896079d

  • SSDEEP

    12288:RYVVENkY660JVaw0HBHOehl0oDL/eToo5Li2:RYVggdVaw0HBFhWof/0o8

Score
10/10

Malware Config

Targets

    • Target

      4910c00dafada374e07428a5d6c590f0N.exe

    • Size

      2.5MB

    • MD5

      4910c00dafada374e07428a5d6c590f0

    • SHA1

      5bf03fb0500d7f1e0d78057b7e9c7b1b93f3ff48

    • SHA256

      a21bbab5fced0b7598dc42e3944c221e47f4fc896b940838b087c2b351defcde

    • SHA512

      e986876f1d79fdc85493e5611d77387baee00e21fa26a7c5fd0687f20d7d623f67ceb65619c1919a0cf433be4aefa4d5155910f5846f3d7b8ee09b334896079d

    • SSDEEP

      12288:RYVVENkY660JVaw0HBHOehl0oDL/eToo5Li2:RYVggdVaw0HBFhWof/0o8

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks