Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e5e6b02ccf83b2edc9e1894a717b2c9114d2fd984617867b59d10922ec908807

  • Size

    529KB

  • Sample

    221030-xxbg7agbek

  • MD5

    828efd221790e2a87cea95207e731ea9

  • SHA1

    811810bc5fa0ed61fc81edf131b7931bbd72c746

  • SHA256

    e5e6b02ccf83b2edc9e1894a717b2c9114d2fd984617867b59d10922ec908807

  • SHA512

    7fdc73e60b9bdcbda99d6c314d83e69ff4c09d2d92c530a7bb326e4aa7e912a06533a688454cc27bd5500305b31a137aefb0604228c0f12239c05348a8c8206f

  • SSDEEP

    12288:RzA5lZhy6RpB/6eXMVVLrkwTzCunpKI13YEqWpKHEFfo3A:RzA5HhRPSeX2VHkuzRnpz1ouKHxA

Malware Config

Targets

    • Target

      e5e6b02ccf83b2edc9e1894a717b2c9114d2fd984617867b59d10922ec908807

    • Size

      529KB

    • MD5

      828efd221790e2a87cea95207e731ea9

    • SHA1

      811810bc5fa0ed61fc81edf131b7931bbd72c746

    • SHA256

      e5e6b02ccf83b2edc9e1894a717b2c9114d2fd984617867b59d10922ec908807

    • SHA512

      7fdc73e60b9bdcbda99d6c314d83e69ff4c09d2d92c530a7bb326e4aa7e912a06533a688454cc27bd5500305b31a137aefb0604228c0f12239c05348a8c8206f

    • SSDEEP

      12288:RzA5lZhy6RpB/6eXMVVLrkwTzCunpKI13YEqWpKHEFfo3A:RzA5HhRPSeX2VHkuzRnpz1ouKHxA

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks