Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2a49e15ba7...0N.exe

windows7-x64

10

2a49e15ba7...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a49e15ba741db57cf124c3c3f2a6d00N.exe

  • Size

    148KB

  • Sample

    240901-ez17hs1fkm

  • MD5

    2a49e15ba741db57cf124c3c3f2a6d00

  • SHA1

    7cf57d548a44428c3af27be64898d41b23189380

  • SHA256

    573eb03320b8ff3c4fb7cd12ba24958484111d54752971cb6fee9ebf2ff62add

  • SHA512

    0aa76c881501eaf59bc727ef909d0900f5383051ee4dfe5fa98a54b22ed6ef80d3d4aa15dcbf0d3c658055d11be20cda05cbe8de1dcec01aebf132de6c394797

  • SSDEEP

    3072:nno3RBHUjXc9RhgY5OdzOdjKtlDoNQQ9wlHOdj+UCRQKOdj+U:nnoB1UDcrhgKOdzOdkOdezOd

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      2a49e15ba741db57cf124c3c3f2a6d00N.exe

    • Size

      148KB

    • MD5

      2a49e15ba741db57cf124c3c3f2a6d00

    • SHA1

      7cf57d548a44428c3af27be64898d41b23189380

    • SHA256

      573eb03320b8ff3c4fb7cd12ba24958484111d54752971cb6fee9ebf2ff62add

    • SHA512

      0aa76c881501eaf59bc727ef909d0900f5383051ee4dfe5fa98a54b22ed6ef80d3d4aa15dcbf0d3c658055d11be20cda05cbe8de1dcec01aebf132de6c394797

    • SSDEEP

      3072:nno3RBHUjXc9RhgY5OdzOdjKtlDoNQQ9wlHOdj+UCRQKOdj+U:nnoB1UDcrhgKOdzOdkOdezOd

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks