Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Virus.Hija...67.exe

windows7-x64

10

Virus.Hija...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_f07ab91409de36742bcb8399678cb167.exe

  • Size

    59KB

  • Sample

    240907-p49pkaxdjh

  • MD5

    f07ab91409de36742bcb8399678cb167

  • SHA1

    68df501a6c785ad3f2334e54d2ab9e209b03ff8b

  • SHA256

    2a3636f787f4d3851605df40e4f56eafa8d0223306c6f7a26a5c67143820374b

  • SHA512

    b55e1e0d8cb879df9ee8175f7cb888520089b4fcb928ec30d341a953f7425e3abcad35f21ea0636f6de75938cad9281a30f6fdcddd26f2be6ba30d12be3ec2d7

  • SSDEEP

    768:cI0Nidx/ZToAo/Le+CJLLkpmmioAFQBgfG4nLU0Ic4RkQNFqzkcDasI2p/1H530V:1vboK+KVFojBgfrY0WFqz5asI2LRO

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_f07ab91409de36742bcb8399678cb167.exe

    • Size

      59KB

    • MD5

      f07ab91409de36742bcb8399678cb167

    • SHA1

      68df501a6c785ad3f2334e54d2ab9e209b03ff8b

    • SHA256

      2a3636f787f4d3851605df40e4f56eafa8d0223306c6f7a26a5c67143820374b

    • SHA512

      b55e1e0d8cb879df9ee8175f7cb888520089b4fcb928ec30d341a953f7425e3abcad35f21ea0636f6de75938cad9281a30f6fdcddd26f2be6ba30d12be3ec2d7

    • SSDEEP

      768:cI0Nidx/ZToAo/Le+CJLLkpmmioAFQBgfG4nLU0Ic4RkQNFqzkcDasI2p/1H530V:1vboK+KVFojBgfrY0WFqz5asI2LRO

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks