Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    05d84bcdde63079c61e85099449d276ae2e4bdfa5dfc11ef7fab94fc119a6875

  • Size

    289KB

  • Sample

    221123-z3676aed78

  • MD5

    349cccb45f5bfa027c8af706b7485dae

  • SHA1

    ecac46c8e571077428f35314399538c83a274522

  • SHA256

    05d84bcdde63079c61e85099449d276ae2e4bdfa5dfc11ef7fab94fc119a6875

  • SHA512

    185a9bfcb7b481e76d86675705bc5716b369541daab9aeeb881864a921010ee83ef62f97ce8919ea7d5dae312c60c8a13e82de58c750e3bbe8f9902b25f7b57d

  • SSDEEP

    6144:pchQ+73/4YIJ8m1MxUyRzoVOBlYQflIGe:pch37P4BJTM6++OBlYERe

Malware Config

Targets

    • Target

      05d84bcdde63079c61e85099449d276ae2e4bdfa5dfc11ef7fab94fc119a6875

    • Size

      289KB

    • MD5

      349cccb45f5bfa027c8af706b7485dae

    • SHA1

      ecac46c8e571077428f35314399538c83a274522

    • SHA256

      05d84bcdde63079c61e85099449d276ae2e4bdfa5dfc11ef7fab94fc119a6875

    • SHA512

      185a9bfcb7b481e76d86675705bc5716b369541daab9aeeb881864a921010ee83ef62f97ce8919ea7d5dae312c60c8a13e82de58c750e3bbe8f9902b25f7b57d

    • SSDEEP

      6144:pchQ+73/4YIJ8m1MxUyRzoVOBlYQflIGe:pch37P4BJTM6++OBlYERe

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks