Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d6f9865a49...0N.exe

windows7-x64

10

d6f9865a49...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6f9865a491f3c631cfd0c6e42930cd0N.exe

  • Size

    45KB

  • Sample

    240904-btb4natdma

  • MD5

    d6f9865a491f3c631cfd0c6e42930cd0

  • SHA1

    db6eba9e6c2214bd3cf07d4aa18a842149a7c743

  • SHA256

    f9a465375b19f955dbd6792d475d21ce08a5fea80f82f865642a5c82bc883a92

  • SHA512

    cf49b75f9cc5f6a79846302b1f02d80db6d19e351f65c4de754cac27b029afe6ce07fc07d5a31007ded8dc184160e452d0eb05d7d9b53d2fa5d72db7bc48e353

  • SSDEEP

    768:nR+30OKOdlSCUAdNze8SC72bsSE59arxedlFxXj18f6v0lYuSMtjjswoo/1H5P:RS0OKUlSHAjze8S/bsSEuKlFxsy0lY6Z

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d6f9865a491f3c631cfd0c6e42930cd0N.exe

    • Size

      45KB

    • MD5

      d6f9865a491f3c631cfd0c6e42930cd0

    • SHA1

      db6eba9e6c2214bd3cf07d4aa18a842149a7c743

    • SHA256

      f9a465375b19f955dbd6792d475d21ce08a5fea80f82f865642a5c82bc883a92

    • SHA512

      cf49b75f9cc5f6a79846302b1f02d80db6d19e351f65c4de754cac27b029afe6ce07fc07d5a31007ded8dc184160e452d0eb05d7d9b53d2fa5d72db7bc48e353

    • SSDEEP

      768:nR+30OKOdlSCUAdNze8SC72bsSE59arxedlFxXj18f6v0lYuSMtjjswoo/1H5P:RS0OKUlSHAjze8S/bsSEuKlFxsy0lY6Z

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks