Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    18dc15f41427c95f60223f932d4824bac7ace4e10d1bc80e5795073d9a6ff313

  • Size

    232KB

  • Sample

    221030-3artjsedf7

  • MD5

    a2318417e27e7217a2e9cbc74037d740

  • SHA1

    f67755a65ea0048eee267cb40d6bf9ef667c257e

  • SHA256

    18dc15f41427c95f60223f932d4824bac7ace4e10d1bc80e5795073d9a6ff313

  • SHA512

    b29ecf4e4893e402f1d87a735923d86fe306f30e1b405bcff8fe9c1f4b3a5df5ad2f5b45948fde829559d4faf3574c7c1d6fb5d16dc20582614886ef0e95d82b

  • SSDEEP

    3072:SCuuNCRs/Pj03pJEEC9ti9pocimFFVW6E1fZim4v5TRRJBYeBTg4vRPW9vc/Bm6+:SCIGPj038tAgFMldWNX+VBBRdCcvfr8d

Malware Config

Targets

    • Target

      18dc15f41427c95f60223f932d4824bac7ace4e10d1bc80e5795073d9a6ff313

    • Size

      232KB

    • MD5

      a2318417e27e7217a2e9cbc74037d740

    • SHA1

      f67755a65ea0048eee267cb40d6bf9ef667c257e

    • SHA256

      18dc15f41427c95f60223f932d4824bac7ace4e10d1bc80e5795073d9a6ff313

    • SHA512

      b29ecf4e4893e402f1d87a735923d86fe306f30e1b405bcff8fe9c1f4b3a5df5ad2f5b45948fde829559d4faf3574c7c1d6fb5d16dc20582614886ef0e95d82b

    • SSDEEP

      3072:SCuuNCRs/Pj03pJEEC9ti9pocimFFVW6E1fZim4v5TRRJBYeBTg4vRPW9vc/Bm6+:SCIGPj038tAgFMldWNX+VBBRdCcvfr8d

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks