Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

4b1ef8b5de...0N.exe

windows7-x64

10

4b1ef8b5de...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b1ef8b5dea2cf37e1df656785ed6620N.exe

  • Size

    224KB

  • Sample

    240908-3xywda1grk

  • MD5

    4b1ef8b5dea2cf37e1df656785ed6620

  • SHA1

    981801e658e1ab5d4fe343eac07b0de490cefcc9

  • SHA256

    296a4e7aa5e843a1e0f8e0590c76de6276fbefa2335f2db2597424d28bf2d787

  • SHA512

    b4859574706b8658f06acefa9c2c5010d7a832f0db209d5e69512e2b7645088a41291b0f54d139169443eee7fb0184d384e1d681306f14cab7f3838251803b23

  • SSDEEP

    3072:ULP2u7wn1bVNIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:2P2uMnjL4s5tTDUZNSN58VU5tTtf

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      4b1ef8b5dea2cf37e1df656785ed6620N.exe

    • Size

      224KB

    • MD5

      4b1ef8b5dea2cf37e1df656785ed6620

    • SHA1

      981801e658e1ab5d4fe343eac07b0de490cefcc9

    • SHA256

      296a4e7aa5e843a1e0f8e0590c76de6276fbefa2335f2db2597424d28bf2d787

    • SHA512

      b4859574706b8658f06acefa9c2c5010d7a832f0db209d5e69512e2b7645088a41291b0f54d139169443eee7fb0184d384e1d681306f14cab7f3838251803b23

    • SSDEEP

      3072:ULP2u7wn1bVNIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:2P2uMnjL4s5tTDUZNSN58VU5tTtf

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks