Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c2ce920d9c...0N.exe

windows7-x64

10

c2ce920d9c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2ce920d9c99840a8d01d3c728cb9c20N.exe

  • Size

    74KB

  • Sample

    240903-qblygaydlb

  • MD5

    c2ce920d9c99840a8d01d3c728cb9c20

  • SHA1

    706b4f1499eb5210b2c551d8be8c62a4575ff05a

  • SHA256

    ba3fb48f150de2912ff2c4b495802cafcb893863212592a18cd7d2299a89a7ae

  • SHA512

    03239ae967e622eacadfab8f4a451bceebc38839e1dd27473c101d7a72ae65c9376ddb8096207a0a9dd679c95380c352225ad88bb3028cfdccf34aec9fa83af4

  • SSDEEP

    1536:ncdde9+09e0vnpRVNRpx5I2QnfUh5UDs8B/R5Go+XAW/c8mVa6+Mp:ncLH2pFNRq2Ysh5UDBBZ5GFX/RsaDa

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      c2ce920d9c99840a8d01d3c728cb9c20N.exe

    • Size

      74KB

    • MD5

      c2ce920d9c99840a8d01d3c728cb9c20

    • SHA1

      706b4f1499eb5210b2c551d8be8c62a4575ff05a

    • SHA256

      ba3fb48f150de2912ff2c4b495802cafcb893863212592a18cd7d2299a89a7ae

    • SHA512

      03239ae967e622eacadfab8f4a451bceebc38839e1dd27473c101d7a72ae65c9376ddb8096207a0a9dd679c95380c352225ad88bb3028cfdccf34aec9fa83af4

    • SSDEEP

      1536:ncdde9+09e0vnpRVNRpx5I2QnfUh5UDs8B/R5Go+XAW/c8mVa6+Mp:ncLH2pFNRq2Ysh5UDBBZ5GFX/RsaDa

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks