Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Virus.Hija...0f.exe

windows7-x64

10

Virus.Hija...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_32f187e57571b1e586ca42972f309b0f.exe

  • Size

    67KB

  • Sample

    240907-p1s8eawhld

  • MD5

    32f187e57571b1e586ca42972f309b0f

  • SHA1

    2574eaed1b25b82029af594d347e121b13569298

  • SHA256

    1db2689913fe0e085124fb6b22c0f01c043948150d11c63a3d190cacc0844c0d

  • SHA512

    ece43ed77447878532c99712ef9d826ade7eb702b9bd091a8388f4c68933544464dad5d890abc72dede98dce49619fa3f0cde19ffb2f1f09d66aa61fd4e2d44f

  • SSDEEP

    1536:C9zahXWmViYnCAEYVgBxKaqEnp6ldQPHuOWT1cgCe8uC:iGhXWmRCGVgBxKaqE+GHuOWTugCe8uC

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_32f187e57571b1e586ca42972f309b0f.exe

    • Size

      67KB

    • MD5

      32f187e57571b1e586ca42972f309b0f

    • SHA1

      2574eaed1b25b82029af594d347e121b13569298

    • SHA256

      1db2689913fe0e085124fb6b22c0f01c043948150d11c63a3d190cacc0844c0d

    • SHA512

      ece43ed77447878532c99712ef9d826ade7eb702b9bd091a8388f4c68933544464dad5d890abc72dede98dce49619fa3f0cde19ffb2f1f09d66aa61fd4e2d44f

    • SSDEEP

      1536:C9zahXWmViYnCAEYVgBxKaqEnp6ldQPHuOWT1cgCe8uC:iGhXWmRCGVgBxKaqE+GHuOWTugCe8uC

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks