Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

c525de6271...95.exe

windows7-x64

10

c525de6271...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c525de627105fb9370a058cbdd19cb54f16ec17e7b8df50359dcbf4d2671cd95

  • Size

    43KB

  • Sample

    250305-lft3esvqz3

  • MD5

    9bfadf60b0b7866c86974c56719f7d6d

  • SHA1

    cf20ed4c5d7ceb734470949c124ecf6c8a18f798

  • SHA256

    c525de627105fb9370a058cbdd19cb54f16ec17e7b8df50359dcbf4d2671cd95

  • SHA512

    4085338d2ed9ef62a496cea13746b5b333a598ccfe71db5e450f2de3b7da5f16a59f6d8b501d6a63c3e0075b3f71df51e27fe43a82da39816daaf20414dec990

  • SSDEEP

    768:+U9XnKJv8KrtPNxT4oreP7cIK3yQpdk6x8pf9m4P/S0hVvIZiGDZ6RO8nHE8taqA:+U9abrtX4oocIK3yQkaY9z/S0hhy6k8i

Score
10/10
sakuladiscoverypersistencerattrojanupx

Malware Config

Targets

    • Target

      c525de627105fb9370a058cbdd19cb54f16ec17e7b8df50359dcbf4d2671cd95

    • Size

      43KB

    • MD5

      9bfadf60b0b7866c86974c56719f7d6d

    • SHA1

      cf20ed4c5d7ceb734470949c124ecf6c8a18f798

    • SHA256

      c525de627105fb9370a058cbdd19cb54f16ec17e7b8df50359dcbf4d2671cd95

    • SHA512

      4085338d2ed9ef62a496cea13746b5b333a598ccfe71db5e450f2de3b7da5f16a59f6d8b501d6a63c3e0075b3f71df51e27fe43a82da39816daaf20414dec990

    • SSDEEP

      768:+U9XnKJv8KrtPNxT4oreP7cIK3yQpdk6x8pf9m4P/S0hVvIZiGDZ6RO8nHE8taqA:+U9abrtX4oocIK3yQkaY9z/S0hhy6k8i

    Score
    10/10
    sakuladiscoverypersistencerattrojanupx

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula family

      sakula

    • Sakula payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks