Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ab0bb324b2...6N.exe

windows7-x64

10

ab0bb324b2...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab0bb324b2c9f6c6f6b7f1e922e786c288d51b11297c7c08797d4ba662fb5926N

  • Size

    482KB

  • Sample

    241002-ljxmqaygpm

  • MD5

    b4f3eb31d71ab7a480071609dbbb26e0

  • SHA1

    ad4a344a0c709ca2279ccb64be512955241f7760

  • SHA256

    ab0bb324b2c9f6c6f6b7f1e922e786c288d51b11297c7c08797d4ba662fb5926

  • SHA512

    d3dfe63609a947e591ebf475b790af6c5ba07da8582f8edb0867c504069e3c097b7c05b8d15ea8d8fb3b598bc278df822b742dbbc7c3b3fcb86b1fbed148fdc3

  • SSDEEP

    6144:N2c5yEpGKLl+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3:N2OymLMwGXAF5KLVGFB24lwR45FB24l

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ab0bb324b2c9f6c6f6b7f1e922e786c288d51b11297c7c08797d4ba662fb5926N

    • Size

      482KB

    • MD5

      b4f3eb31d71ab7a480071609dbbb26e0

    • SHA1

      ad4a344a0c709ca2279ccb64be512955241f7760

    • SHA256

      ab0bb324b2c9f6c6f6b7f1e922e786c288d51b11297c7c08797d4ba662fb5926

    • SHA512

      d3dfe63609a947e591ebf475b790af6c5ba07da8582f8edb0867c504069e3c097b7c05b8d15ea8d8fb3b598bc278df822b742dbbc7c3b3fcb86b1fbed148fdc3

    • SSDEEP

      6144:N2c5yEpGKLl+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3:N2OymLMwGXAF5KLVGFB24lwR45FB24l

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks