Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ddec3bbfcef0f8f9d618900ee6a516a603f4b04a11f3278ed9fc6422f1aa831d

  • Size

    121KB

  • Sample

    221203-paandahc99

  • MD5

    dde3eadc52b0b9d94334342185bc0802

  • SHA1

    344281d825f4b94779c278def024eef72a6d9657

  • SHA256

    ddec3bbfcef0f8f9d618900ee6a516a603f4b04a11f3278ed9fc6422f1aa831d

  • SHA512

    4ac85fda88c517c9a974e57f675e7153cee143878d6cc75ec370f21cd26bac60f953c326d594e902cfca5f481c7a0ee9ce714034d07a6c871126e76faa78b132

  • SSDEEP

    768:9QxkwiHBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2f:98kwitTEhU4HDa1KkjWXUa21mc/Mue9G

Malware Config

Targets

    • Target

      ddec3bbfcef0f8f9d618900ee6a516a603f4b04a11f3278ed9fc6422f1aa831d

    • Size

      121KB

    • MD5

      dde3eadc52b0b9d94334342185bc0802

    • SHA1

      344281d825f4b94779c278def024eef72a6d9657

    • SHA256

      ddec3bbfcef0f8f9d618900ee6a516a603f4b04a11f3278ed9fc6422f1aa831d

    • SHA512

      4ac85fda88c517c9a974e57f675e7153cee143878d6cc75ec370f21cd26bac60f953c326d594e902cfca5f481c7a0ee9ce714034d07a6c871126e76faa78b132

    • SSDEEP

      768:9QxkwiHBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2f:98kwitTEhU4HDa1KkjWXUa21mc/Mue9G

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks