Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b2d299e7e2...0N.exe

windows7-x64

10

b2d299e7e2...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2d299e7e2ba9da18fe1aec6d7ed33c0N.exe

  • Size

    512KB

  • Sample

    240903-fex5ssxejk

  • MD5

    b2d299e7e2ba9da18fe1aec6d7ed33c0

  • SHA1

    bdb05fb7902a3779975918bd0044bc822e002931

  • SHA256

    1d9cb31c20b05ab8ec0dbc315156972a36f2be05bb1eddc6fb239d1616b3deb8

  • SHA512

    905beadcb1f22958bd88f3e0d1198fbafa6c7e66428cb0e3cae54cef05e68dd74836acd62c6a56ec6cb6349b3d6acec13d436e0e48ce1c0637ed6e6792dcff38

  • SSDEEP

    12288:cVoHyT7nHvndny4GyXu1jGG1wsGeBgRTGAzciETdqvZNemWrsiLk6mqgSg9:cVDnDGyXsGG1wsLUT3Iipr

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      b2d299e7e2ba9da18fe1aec6d7ed33c0N.exe

    • Size

      512KB

    • MD5

      b2d299e7e2ba9da18fe1aec6d7ed33c0

    • SHA1

      bdb05fb7902a3779975918bd0044bc822e002931

    • SHA256

      1d9cb31c20b05ab8ec0dbc315156972a36f2be05bb1eddc6fb239d1616b3deb8

    • SHA512

      905beadcb1f22958bd88f3e0d1198fbafa6c7e66428cb0e3cae54cef05e68dd74836acd62c6a56ec6cb6349b3d6acec13d436e0e48ce1c0637ed6e6792dcff38

    • SSDEEP

      12288:cVoHyT7nHvndny4GyXu1jGG1wsGeBgRTGAzciETdqvZNemWrsiLk6mqgSg9:cVDnDGyXsGG1wsLUT3Iipr

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks