Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Virus.Hija...55.exe

windows7-x64

10

Virus.Hija...55.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_0f06543a812953ff7aca00c249272255.exe

  • Size

    366KB

  • Sample

    240907-pmg8zsvckf

  • MD5

    0f06543a812953ff7aca00c249272255

  • SHA1

    ab1d1d1d74ea6f824161cb377fef3e41308028d1

  • SHA256

    39c93d15407939a3ea99e0794e302fb87fe0c7fb84ab3aaa3e9760517420e51e

  • SHA512

    b9418d2a16eee986b862fe2f5e2d6243c998e4988f76e772b5ca948b56261fdf1b5b5851f85d414b7557ba91f6dc2a4be30650009c35c43a6e6fc6465a9d71e5

  • SSDEEP

    6144:f40OIgCphNY+R225LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:7jhNY+RxZoivKv32XXf9Do3+IviD

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_0f06543a812953ff7aca00c249272255.exe

    • Size

      366KB

    • MD5

      0f06543a812953ff7aca00c249272255

    • SHA1

      ab1d1d1d74ea6f824161cb377fef3e41308028d1

    • SHA256

      39c93d15407939a3ea99e0794e302fb87fe0c7fb84ab3aaa3e9760517420e51e

    • SHA512

      b9418d2a16eee986b862fe2f5e2d6243c998e4988f76e772b5ca948b56261fdf1b5b5851f85d414b7557ba91f6dc2a4be30650009c35c43a6e6fc6465a9d71e5

    • SSDEEP

      6144:f40OIgCphNY+R225LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:7jhNY+RxZoivKv32XXf9Do3+IviD

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks