Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a

  • Size

    486KB

  • Sample

    220130-tgctjadffp

  • MD5

    e061670462a35bb5f46803394f9ca733

  • SHA1

    98f2431930d74308ac5f2cc0168ce5c0d7c23eb9

  • SHA256

    20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a

  • SHA512

    2378759e4e4b98631f3b0179aa9c08082dca95c9ef12946b201de26f2ce827c21fa2f5f078211553dc6ce5c2513be2bcd75557ebd2bb3c35486fc1d957452e7b

Malware Config

Targets

    • Target

      20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a

    • Size

      486KB

    • MD5

      e061670462a35bb5f46803394f9ca733

    • SHA1

      98f2431930d74308ac5f2cc0168ce5c0d7c23eb9

    • SHA256

      20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a

    • SHA512

      2378759e4e4b98631f3b0179aa9c08082dca95c9ef12946b201de26f2ce827c21fa2f5f078211553dc6ce5c2513be2bcd75557ebd2bb3c35486fc1d957452e7b

    Score
    10/10
    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks