Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1cb8b182e225c348482b399da801cc6fc7855806987c8ee1e3e45a1c4aadca72

  • Size

    371KB

  • Sample

    221106-1ctptacec4

  • MD5

    0f57540056bb2a916141b412bfcfdd80

  • SHA1

    f734b913984ccbf7918b1ec5b618d3f0818ecd9f

  • SHA256

    1cb8b182e225c348482b399da801cc6fc7855806987c8ee1e3e45a1c4aadca72

  • SHA512

    ebb40670a845eb1f0b59f54c04b90c67009c1d4f876205c5c9f914cd65d64d1e67e5ca9e784420ad6aed1e2ef4189830e9fca05d9ae4d09732a3d6c066efc5db

  • SSDEEP

    6144:zOTeHI8HiL7+f5Qq0Mn4+sQJiZGBWPi4u0MtI6Gw72EWXVT3e:GeoGiLa7npsotAi+Z6Gw72EqV3e

Malware Config

Targets

    • Target

      1cb8b182e225c348482b399da801cc6fc7855806987c8ee1e3e45a1c4aadca72

    • Size

      371KB

    • MD5

      0f57540056bb2a916141b412bfcfdd80

    • SHA1

      f734b913984ccbf7918b1ec5b618d3f0818ecd9f

    • SHA256

      1cb8b182e225c348482b399da801cc6fc7855806987c8ee1e3e45a1c4aadca72

    • SHA512

      ebb40670a845eb1f0b59f54c04b90c67009c1d4f876205c5c9f914cd65d64d1e67e5ca9e784420ad6aed1e2ef4189830e9fca05d9ae4d09732a3d6c066efc5db

    • SSDEEP

      6144:zOTeHI8HiL7+f5Qq0Mn4+sQJiZGBWPi4u0MtI6Gw72EWXVT3e:GeoGiLa7npsotAi+Z6Gw72EqV3e

    • Modifies firewall policy service

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks