Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    77fb9b3679bb7073dd9a51d455087c8b8fcd59fb2b8e16b0ed3aa76ffbd071f0

  • Size

    481KB

  • Sample

    221201-ddrwaacd3z

  • MD5

    f40d21bf736ffaf0ad9d3d1d00b8110f

  • SHA1

    b8b473c4e7a82c08a9666b018fc6244643f4d9fe

  • SHA256

    77fb9b3679bb7073dd9a51d455087c8b8fcd59fb2b8e16b0ed3aa76ffbd071f0

  • SHA512

    bc1b92bc4fb3ec15708601671a1033c240c239c3720e8a2d540da827ca7abf2158e3bd300a76a0e9c00a9a74ef4095904bd84ca4d8cbc726d8775f6af80210c0

  • SSDEEP

    6144:maMfOqsC/FrbLoS37ikDf5TIXwFJbv6A6u8QObTAb8KUHqzXgwJuva/gxhc4YhEJ:m9L/dbBz/Ehv66qbfJuvCgxaXgh/t

Score
9/10

Malware Config

Targets

    • Target

      77fb9b3679bb7073dd9a51d455087c8b8fcd59fb2b8e16b0ed3aa76ffbd071f0

    • Size

      481KB

    • MD5

      f40d21bf736ffaf0ad9d3d1d00b8110f

    • SHA1

      b8b473c4e7a82c08a9666b018fc6244643f4d9fe

    • SHA256

      77fb9b3679bb7073dd9a51d455087c8b8fcd59fb2b8e16b0ed3aa76ffbd071f0

    • SHA512

      bc1b92bc4fb3ec15708601671a1033c240c239c3720e8a2d540da827ca7abf2158e3bd300a76a0e9c00a9a74ef4095904bd84ca4d8cbc726d8775f6af80210c0

    • SSDEEP

      6144:maMfOqsC/FrbLoS37ikDf5TIXwFJbv6A6u8QObTAb8KUHqzXgwJuva/gxhc4YhEJ:m9L/dbBz/Ehv66qbfJuvCgxaXgh/t

    Score
    9/10
    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks