Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ecfb2f8b58...0N.exe

windows7-x64

10

ecfb2f8b58...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecfb2f8b58c4fc197344af5ae8a26a50N.exe

  • Size

    101KB

  • Sample

    240825-acbacsxbqf

  • MD5

    ecfb2f8b58c4fc197344af5ae8a26a50

  • SHA1

    4b9ad59530aa9b1d45d6c0440cb427e1010d2d7e

  • SHA256

    47d49d1d80c6fe1408a8295aa47bd5d53b5e63b609fc73bb3ec8fcef61dc02ca

  • SHA512

    7382aa54b20ff4089eb48306a7d8b77c29e6e62c716b8b5a97f1695dfe0979fd38a5cee4e1619657bc40a948745e0e62ebf425bb93d1e9728de11ef29454f0d7

  • SSDEEP

    3072:xJO3LMSPm8rxJHOoe9d4yie3U3/zrB3g3k8p4qI4/HQCC:rO3Pr49Ky5QPBZs/HNC

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ecfb2f8b58c4fc197344af5ae8a26a50N.exe

    • Size

      101KB

    • MD5

      ecfb2f8b58c4fc197344af5ae8a26a50

    • SHA1

      4b9ad59530aa9b1d45d6c0440cb427e1010d2d7e

    • SHA256

      47d49d1d80c6fe1408a8295aa47bd5d53b5e63b609fc73bb3ec8fcef61dc02ca

    • SHA512

      7382aa54b20ff4089eb48306a7d8b77c29e6e62c716b8b5a97f1695dfe0979fd38a5cee4e1619657bc40a948745e0e62ebf425bb93d1e9728de11ef29454f0d7

    • SSDEEP

      3072:xJO3LMSPm8rxJHOoe9d4yie3U3/zrB3g3k8p4qI4/HQCC:rO3Pr49Ky5QPBZs/HNC

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks