Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

faaa364d91...60.exe

windows7-x64

10

faaa364d91...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faaa364d917dd790f20965c92125f590191e269d4363a4a0852311732f7fbd60

  • Size

    173KB

  • Sample

    240904-nlrwcsygll

  • MD5

    7ffd33102c9d2c286fd9c5a39c2b2cb6

  • SHA1

    dc388574e03229b9ffeacbf1bed2a8b2821ce241

  • SHA256

    faaa364d917dd790f20965c92125f590191e269d4363a4a0852311732f7fbd60

  • SHA512

    f29248e2a467966e86449b8f613177adc4fa76fc5bdf4c4dd856eaf2d90926ea2116f55b8e9b668646ccdfbc1f70b7411784f92e85c4bdd98f7feed46c800a1e

  • SSDEEP

    3072:k2l4r5e+zvqLuZNGH0HwVaD1i/MwGsGnDc9nhVizLrRo6+:ti5e+rKuZNs/VKi/MwGsmLrRo6+

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      faaa364d917dd790f20965c92125f590191e269d4363a4a0852311732f7fbd60

    • Size

      173KB

    • MD5

      7ffd33102c9d2c286fd9c5a39c2b2cb6

    • SHA1

      dc388574e03229b9ffeacbf1bed2a8b2821ce241

    • SHA256

      faaa364d917dd790f20965c92125f590191e269d4363a4a0852311732f7fbd60

    • SHA512

      f29248e2a467966e86449b8f613177adc4fa76fc5bdf4c4dd856eaf2d90926ea2116f55b8e9b668646ccdfbc1f70b7411784f92e85c4bdd98f7feed46c800a1e

    • SSDEEP

      3072:k2l4r5e+zvqLuZNGH0HwVaD1i/MwGsGnDc9nhVizLrRo6+:ti5e+rKuZNs/VKi/MwGsmLrRo6+

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks