Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e3c799397c7e076d9e1d69ed46a093fb6bf46f08146f088a022a6a2d5a4abce2

  • Size

    110KB

  • Sample

    221204-qs6n7sgf8x

  • MD5

    a7af90f5da509415d3e03b2636628529

  • SHA1

    ab5f9294f77211bce8c0860964ef0408eeccf9f5

  • SHA256

    e3c799397c7e076d9e1d69ed46a093fb6bf46f08146f088a022a6a2d5a4abce2

  • SHA512

    02e9d40d28bef9cf976342cdc19bc0b5081bf87ab2fc57b792201f3a57a6595f38f2e4fda31610687e5f621dc446dc14b92fee6c7c5eb8aff878cdc31fb90845

  • SSDEEP

    3072:ch6Jsu7EQ7qOIx4J2vNbGfvGnd3gW5ZM4/us:+0V7EQ7GNdndPZMTs

Malware Config

Targets

    • Target

      e3c799397c7e076d9e1d69ed46a093fb6bf46f08146f088a022a6a2d5a4abce2

    • Size

      110KB

    • MD5

      a7af90f5da509415d3e03b2636628529

    • SHA1

      ab5f9294f77211bce8c0860964ef0408eeccf9f5

    • SHA256

      e3c799397c7e076d9e1d69ed46a093fb6bf46f08146f088a022a6a2d5a4abce2

    • SHA512

      02e9d40d28bef9cf976342cdc19bc0b5081bf87ab2fc57b792201f3a57a6595f38f2e4fda31610687e5f621dc446dc14b92fee6c7c5eb8aff878cdc31fb90845

    • SSDEEP

      3072:ch6Jsu7EQ7qOIx4J2vNbGfvGnd3gW5ZM4/us:+0V7EQ7GNdndPZMTs

    • Modifies WinLogon for persistence

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • UAC bypass

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks