Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d72c4d2d85...0N.exe

windows7-x64

10

d72c4d2d85...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d72c4d2d85a90287a19e2764e8607ce0N.exe

  • Size

    80KB

  • Sample

    240901-xcaedszald

  • MD5

    d72c4d2d85a90287a19e2764e8607ce0

  • SHA1

    56bbfc3288f9558c02ff0f2a1e621ddb969218dd

  • SHA256

    3642cc5574d62db91ec3efdf7ed3eb5f7f2cf2d60a814bfc99fcfa500f1fff09

  • SHA512

    11c782b39e0faf6f88a79e610151fa3577805779b9c3845f091e1c4a1faef702ec2859dbc1b1625dc331d77e077218597bba2b17068a1d012a2d84a11c144080

  • SSDEEP

    1536:uTm0GzFPhg3OfLfBlcYCl3OGFzqzDfWqdMVrlEFtyb7IYOOqw4Tv:ZrTTZiYi3OGFzqzTWqAhELy1MTTv

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d72c4d2d85a90287a19e2764e8607ce0N.exe

    • Size

      80KB

    • MD5

      d72c4d2d85a90287a19e2764e8607ce0

    • SHA1

      56bbfc3288f9558c02ff0f2a1e621ddb969218dd

    • SHA256

      3642cc5574d62db91ec3efdf7ed3eb5f7f2cf2d60a814bfc99fcfa500f1fff09

    • SHA512

      11c782b39e0faf6f88a79e610151fa3577805779b9c3845f091e1c4a1faef702ec2859dbc1b1625dc331d77e077218597bba2b17068a1d012a2d84a11c144080

    • SSDEEP

      1536:uTm0GzFPhg3OfLfBlcYCl3OGFzqzDfWqdMVrlEFtyb7IYOOqw4Tv:ZrTTZiYi3OGFzqzTWqAhELy1MTTv

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks