Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2b9cb01b69...0N.exe

windows7-x64

10

2b9cb01b69...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b9cb01b69b3972d69a545523f3b2820N.exe

  • Size

    84KB

  • Sample

    240901-2he92stdrj

  • MD5

    2b9cb01b69b3972d69a545523f3b2820

  • SHA1

    161d7dc7f4f4a0cfdb7ac6ad92e0b57f232878fa

  • SHA256

    07252be6bca959e0e804d398a956341c62b3bec82726a34788ea6b0e13fe47d2

  • SHA512

    6682a55ff303fc84b54f066a5dbd3e31193db1ccc2b973d4ac61896eccb1d245c656ac0f7c04e4dcf9e4b4b108964f9709aee8ceff1a2d4d752ecf1d6c560087

  • SSDEEP

    1536:zXVOxu5G3Ntjmxuw+pH8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmmmmmmmmdGZ:fIdVU+p/3PDyH6n8djlLYR7xr3

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      2b9cb01b69b3972d69a545523f3b2820N.exe

    • Size

      84KB

    • MD5

      2b9cb01b69b3972d69a545523f3b2820

    • SHA1

      161d7dc7f4f4a0cfdb7ac6ad92e0b57f232878fa

    • SHA256

      07252be6bca959e0e804d398a956341c62b3bec82726a34788ea6b0e13fe47d2

    • SHA512

      6682a55ff303fc84b54f066a5dbd3e31193db1ccc2b973d4ac61896eccb1d245c656ac0f7c04e4dcf9e4b4b108964f9709aee8ceff1a2d4d752ecf1d6c560087

    • SSDEEP

      1536:zXVOxu5G3Ntjmxuw+pH8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmmmmmmmmdGZ:fIdVU+p/3PDyH6n8djlLYR7xr3

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks