Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cc878688122b40ca6ed03730e319ce5a48e318442423df7505196bba6a4bc6d5

  • Size

    264KB

  • Sample

    221129-jjcw7shf63

  • MD5

    45c8b34daa550fde1f82a2acccda5f07

  • SHA1

    fcc639efb6d02a1dea64650fcfd913fd2393a759

  • SHA256

    cc878688122b40ca6ed03730e319ce5a48e318442423df7505196bba6a4bc6d5

  • SHA512

    ac114f6761fd9a2f7693bf9ea75238f9a3e8a7a3e505072f5217eb73d05ae1408825687949bc0335461df4867059c0c5a4f47b732cf81523dcc51b353d815e09

  • SSDEEP

    3072:VdcQ2ZNMSQvbajUTUItjT68+xQUpr/lIylK8ZUaUubSG7cEe0XjQS+JxjwoDjlaF:lATSOjUQK4rtIylKC55IE3XkFjJDhaF

Malware Config

Targets

    • Target

      cc878688122b40ca6ed03730e319ce5a48e318442423df7505196bba6a4bc6d5

    • Size

      264KB

    • MD5

      45c8b34daa550fde1f82a2acccda5f07

    • SHA1

      fcc639efb6d02a1dea64650fcfd913fd2393a759

    • SHA256

      cc878688122b40ca6ed03730e319ce5a48e318442423df7505196bba6a4bc6d5

    • SHA512

      ac114f6761fd9a2f7693bf9ea75238f9a3e8a7a3e505072f5217eb73d05ae1408825687949bc0335461df4867059c0c5a4f47b732cf81523dcc51b353d815e09

    • SSDEEP

      3072:VdcQ2ZNMSQvbajUTUItjT68+xQUpr/lIylK8ZUaUubSG7cEe0XjQS+JxjwoDjlaF:lATSOjUQK4rtIylKC55IE3XkFjJDhaF

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks