Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a7ecd5816f5da87f214918e9c389ca55e4259fad0b6c978c5ef0b70c95f0f0e3

  • Size

    212KB

  • Sample

    221011-adyr2sfbhj

  • MD5

    40f196f57b767669ccd72bb230bf7c30

  • SHA1

    15551a0fc08f834a8bcbe090ecf2aa5f25e0e1b5

  • SHA256

    a7ecd5816f5da87f214918e9c389ca55e4259fad0b6c978c5ef0b70c95f0f0e3

  • SHA512

    eb39cc463d71f1735ff2482141d69e2553d1ed4f3498a34cf5e870fa0ed12095c05a71bfc03cc10c865ed02d8193155d3c8aa9915213a267ae7d206be1f25db1

  • SSDEEP

    3072:En4cV8gf2u41Z5tKlwfSrohytZZ4fGEbCP:24y8gOl2iSrowtZZmK

Score
10/10

Malware Config

Targets

    • Target

      a7ecd5816f5da87f214918e9c389ca55e4259fad0b6c978c5ef0b70c95f0f0e3

    • Size

      212KB

    • MD5

      40f196f57b767669ccd72bb230bf7c30

    • SHA1

      15551a0fc08f834a8bcbe090ecf2aa5f25e0e1b5

    • SHA256

      a7ecd5816f5da87f214918e9c389ca55e4259fad0b6c978c5ef0b70c95f0f0e3

    • SHA512

      eb39cc463d71f1735ff2482141d69e2553d1ed4f3498a34cf5e870fa0ed12095c05a71bfc03cc10c865ed02d8193155d3c8aa9915213a267ae7d206be1f25db1

    • SSDEEP

      3072:En4cV8gf2u41Z5tKlwfSrohytZZ4fGEbCP:24y8gOl2iSrowtZZmK

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks