Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c131793cda71dacda3048f8375e4c188077ec5edd468d22449fb76e657aa1914

  • Size

    524KB

  • Sample

    221107-caz7tacbd6

  • MD5

    1307290a1f7aa677ab118cadfa75fde0

  • SHA1

    67d7ed206a3f70b05ab2bec29dfd5826be4d53be

  • SHA256

    c131793cda71dacda3048f8375e4c188077ec5edd468d22449fb76e657aa1914

  • SHA512

    32b91d4c7664aa202dd8f9b7d155edbd9be2434ad3d5a313600ceeb285a173d963750cc691984107b436cd86033cccce48d52d2a2afedeeea346ef9470e53e53

  • SSDEEP

    6144:RUABFk4+pAuO/50BTnqPd0Mpz7qhh4nXjjf8MZ9BKXKKk4+pAuO/50BTnqPd0MpY:GUdGLE0kuGnESBaGLE0kuGnESBW

Malware Config

Targets

    • Target

      c131793cda71dacda3048f8375e4c188077ec5edd468d22449fb76e657aa1914

    • Size

      524KB

    • MD5

      1307290a1f7aa677ab118cadfa75fde0

    • SHA1

      67d7ed206a3f70b05ab2bec29dfd5826be4d53be

    • SHA256

      c131793cda71dacda3048f8375e4c188077ec5edd468d22449fb76e657aa1914

    • SHA512

      32b91d4c7664aa202dd8f9b7d155edbd9be2434ad3d5a313600ceeb285a173d963750cc691984107b436cd86033cccce48d52d2a2afedeeea346ef9470e53e53

    • SSDEEP

      6144:RUABFk4+pAuO/50BTnqPd0Mpz7qhh4nXjjf8MZ9BKXKKk4+pAuO/50BTnqPd0MpY:GUdGLE0kuGnESBaGLE0kuGnESBW

    • CyberGate, Rebhip

      CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    • Adds policy Run key to start application

    • Executes dropped EXE

    • Modifies Installed Components in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks