Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    55574524900a8fb459d0050a00c64ac409c66c58084409e7492aec96cb265dd7

  • Size

    27KB

  • Sample

    221129-k1xhlsec43

  • MD5

    0c9ee4a8c45b7a5ce276bf629025b5ef

  • SHA1

    1b0a1ae737c9377eaf4bf406afd3870c8144d136

  • SHA256

    55574524900a8fb459d0050a00c64ac409c66c58084409e7492aec96cb265dd7

  • SHA512

    6fb7355bbdeca1c47de3473bcb3d414504266a92ff4c4ff586fe7918497a7f7604c78daf1239372cf79929f425130a7bbd79717e69b23e30187f58c0ff3eec95

  • SSDEEP

    384:u5kAWwLQORlWwOkmEzrU97+KqOyVWZpHVP8NkJ4snGF1DS5+W9781i5GiW4tDSh5:08O/WwOFIrugE4Ni8LzOilveez19zf

Score
8/10

Malware Config

Targets

    • Target

      55574524900a8fb459d0050a00c64ac409c66c58084409e7492aec96cb265dd7

    • Size

      27KB

    • MD5

      0c9ee4a8c45b7a5ce276bf629025b5ef

    • SHA1

      1b0a1ae737c9377eaf4bf406afd3870c8144d136

    • SHA256

      55574524900a8fb459d0050a00c64ac409c66c58084409e7492aec96cb265dd7

    • SHA512

      6fb7355bbdeca1c47de3473bcb3d414504266a92ff4c4ff586fe7918497a7f7604c78daf1239372cf79929f425130a7bbd79717e69b23e30187f58c0ff3eec95

    • SSDEEP

      384:u5kAWwLQORlWwOkmEzrU97+KqOyVWZpHVP8NkJ4snGF1DS5+W9781i5GiW4tDSh5:08O/WwOFIrugE4Ni8LzOilveez19zf

    Score
    8/10
    • Modifies Installed Components in the registry

    • Deletes itself

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks