Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Gangetabellers.exe

  • Size

    1.3MB

  • Sample

    221107-ttrs8affc8

  • MD5

    02f0467bad6626346aeb35dcd4fc0e13

  • SHA1

    45c2c3275ae1cb4acdb037510697207bb32d9b80

  • SHA256

    10ecf2cee352b8f12313f09efbf807295fdcc535af887a02c00360d6b8a53666

  • SHA512

    d00ed1f309ee78ee4d3e7857d610d3c1ab4dabad5fddbd703e621383ade1762ea06e4862d0a4a872b83002ce2e912693a64ec5578ff3741b35b3ff6a6e39ce24

  • SSDEEP

    24576:jbNxpJi3W1C8y/qEdR6Mwr6Ljzssqfgb2pYoEMlsQGiw0ZL2o8:3NPJU/Td4MwO9qoSpYvssQGRo8

Score
7/10

Malware Config

Targets

    • Target

      Gangetabellers.exe

    • Size

      1.3MB

    • MD5

      02f0467bad6626346aeb35dcd4fc0e13

    • SHA1

      45c2c3275ae1cb4acdb037510697207bb32d9b80

    • SHA256

      10ecf2cee352b8f12313f09efbf807295fdcc535af887a02c00360d6b8a53666

    • SHA512

      d00ed1f309ee78ee4d3e7857d610d3c1ab4dabad5fddbd703e621383ade1762ea06e4862d0a4a872b83002ce2e912693a64ec5578ff3741b35b3ff6a6e39ce24

    • SSDEEP

      24576:jbNxpJi3W1C8y/qEdR6Mwr6Ljzssqfgb2pYoEMlsQGiw0ZL2o8:3NPJU/Td4MwO9qoSpYvssQGRo8

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks