Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

eaf606828d...2N.exe

windows7-x64

10

eaf606828d...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf606828d00494c3ce756ab640326141179e3586df8216fba3a0e14f43e8432N

  • Size

    95KB

  • Sample

    241010-jkcylaxblm

  • MD5

    8fe34054acb0118281dd26b7f4999600

  • SHA1

    b0d9878ff14a05b1c4cb96cd6e8f78ea13450fc3

  • SHA256

    eaf606828d00494c3ce756ab640326141179e3586df8216fba3a0e14f43e8432

  • SHA512

    80c3416644460f9b4a75494ece85e22fc1df3f50115b876054a75c376f653ee15a49a07bd7e1fcbca6b7bc18d427c4cf00f3fc6f69ccc5fa14a2e44b353cb3d0

  • SSDEEP

    1536:1hdf7iO3Ce4ATfSrrhP94VljZHoasACjcVE73ZN9OM6bOLXi8PmCofGV:5f7RfCP9E/VxecG7r9DrLXfzoeV

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      eaf606828d00494c3ce756ab640326141179e3586df8216fba3a0e14f43e8432N

    • Size

      95KB

    • MD5

      8fe34054acb0118281dd26b7f4999600

    • SHA1

      b0d9878ff14a05b1c4cb96cd6e8f78ea13450fc3

    • SHA256

      eaf606828d00494c3ce756ab640326141179e3586df8216fba3a0e14f43e8432

    • SHA512

      80c3416644460f9b4a75494ece85e22fc1df3f50115b876054a75c376f653ee15a49a07bd7e1fcbca6b7bc18d427c4cf00f3fc6f69ccc5fa14a2e44b353cb3d0

    • SSDEEP

      1536:1hdf7iO3Ce4ATfSrrhP94VljZHoasACjcVE73ZN9OM6bOLXi8PmCofGV:5f7RfCP9E/VxecG7r9DrLXfzoeV

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks