Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8718d05c0a04523ebf933d9aad5a212e54804adaf7c9f8464a3967ea4511f280

  • Size

    160KB

  • Sample

    221030-cx1rvsghc2

  • MD5

    a2ec665275cb47bb2d699c9b09bbacb0

  • SHA1

    3dbf514d59f82b73de12945ee317eae7ad74695b

  • SHA256

    8718d05c0a04523ebf933d9aad5a212e54804adaf7c9f8464a3967ea4511f280

  • SHA512

    31f5deddd9f9017ac196614a9d28b9d7e6d9150ce971ca9a07aeb32c41e71f2fb92ef230a7bdd364e46f3e0c77d9fd67c1af8b4330e59d790608b9a032d3fa01

  • SSDEEP

    3072:eqPL1/7w6ZAs+VBKxL7TURxZPQeQ6DHtsamoBz:rQVOTOZPQRIHrmoB

Malware Config

Targets

    • Target

      8718d05c0a04523ebf933d9aad5a212e54804adaf7c9f8464a3967ea4511f280

    • Size

      160KB

    • MD5

      a2ec665275cb47bb2d699c9b09bbacb0

    • SHA1

      3dbf514d59f82b73de12945ee317eae7ad74695b

    • SHA256

      8718d05c0a04523ebf933d9aad5a212e54804adaf7c9f8464a3967ea4511f280

    • SHA512

      31f5deddd9f9017ac196614a9d28b9d7e6d9150ce971ca9a07aeb32c41e71f2fb92ef230a7bdd364e46f3e0c77d9fd67c1af8b4330e59d790608b9a032d3fa01

    • SSDEEP

      3072:eqPL1/7w6ZAs+VBKxL7TURxZPQeQ6DHtsamoBz:rQVOTOZPQRIHrmoB

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks