Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

381b37fdcf...60.dll

windows7-x64

10

381b37fdcf...60.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    381b37fdcf853dbee9dcf73effbe1ad5b1a92cb2de5e00ece3d7f1e8999f8b60

  • Size

    3.5MB

  • Sample

    250305-pbdresykw3

  • MD5

    aeb33c1d84f05897ea308d2046c2f74d

  • SHA1

    6deb5ebaa2b92ad2ba0dc8fce418aa60b739fca8

  • SHA256

    381b37fdcf853dbee9dcf73effbe1ad5b1a92cb2de5e00ece3d7f1e8999f8b60

  • SHA512

    de0401ee805e73965fd0cc3c55aec509799063dcb806e2d741dd26bfe009cbefbe7ece7b1efa0bc0a9d3ba157c85045b003d43586eed9bf084ba62be5bea0213

  • SSDEEP

    49152:QDbRTtP4NngsGcwTwKLh6oBQqDCnCoVDn99c1/0VXGfzXjbsbPyAmZea+:8LA+j62DCCuDnu0VXGfLPQ6AmZeR

Score
10/10
banloaddownloaderdropperpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target

      381b37fdcf853dbee9dcf73effbe1ad5b1a92cb2de5e00ece3d7f1e8999f8b60

    • Size

      3.5MB

    • MD5

      aeb33c1d84f05897ea308d2046c2f74d

    • SHA1

      6deb5ebaa2b92ad2ba0dc8fce418aa60b739fca8

    • SHA256

      381b37fdcf853dbee9dcf73effbe1ad5b1a92cb2de5e00ece3d7f1e8999f8b60

    • SHA512

      de0401ee805e73965fd0cc3c55aec509799063dcb806e2d741dd26bfe009cbefbe7ece7b1efa0bc0a9d3ba157c85045b003d43586eed9bf084ba62be5bea0213

    • SSDEEP

      49152:QDbRTtP4NngsGcwTwKLh6oBQqDCnCoVDn99c1/0VXGfzXjbsbPyAmZea+:8LA+j62DCCuDnu0VXGfLPQ6AmZeR

    Score
    10/10
    banloaddownloaderdropperpersistenceprivilege_escalationtrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks