Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8

  • Size

    179KB

  • Sample

    220918-3tt31sfef4

  • MD5

    fc150e461355f607bcda8439f4e8ac6c

  • SHA1

    fd8cdf427c8e6d064789d4c7ece1a3da47fb567c

  • SHA256

    cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8

  • SHA512

    578cd5b6fcfa7654152fef797649b602045e7f824f9acb421a6a590f13a7580a286b36545bc83a59f316405d36ee6b09743609a84dac49bc34823d7435f1e8f3

  • SSDEEP

    3072:sFPzNvmJoIKpcDggzKtmPZzCKQsf4PIaNrr/yWTo9CjNxlqr9AjiRSzwWI8ZNq4J:sbcY0KtAYKQsirNrTyW89EaEiRSzwWI0

Malware Config

Targets

    • Target

      cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8

    • Size

      179KB

    • MD5

      fc150e461355f607bcda8439f4e8ac6c

    • SHA1

      fd8cdf427c8e6d064789d4c7ece1a3da47fb567c

    • SHA256

      cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8

    • SHA512

      578cd5b6fcfa7654152fef797649b602045e7f824f9acb421a6a590f13a7580a286b36545bc83a59f316405d36ee6b09743609a84dac49bc34823d7435f1e8f3

    • SSDEEP

      3072:sFPzNvmJoIKpcDggzKtmPZzCKQsf4PIaNrr/yWTo9CjNxlqr9AjiRSzwWI8ZNq4J:sbcY0KtAYKQsirNrTyW89EaEiRSzwWI0

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks