Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bbe7937b4c3198cbf46a8178753a63c987494d4f3a9798df65f8a57ce71f6941

  • Size

    276KB

  • Sample

    221205-2w6n6aeg65

  • MD5

    6cdcb0900130b5cce6a2ae36868c1d9b

  • SHA1

    05e2afbd095a163e6fac8822ed49ca565b688b39

  • SHA256

    bbe7937b4c3198cbf46a8178753a63c987494d4f3a9798df65f8a57ce71f6941

  • SHA512

    5f4cb49137167656ca482fd4e1e98c02a7e4e51a65a70a48179183e36a87fdf91e0596273255e0d931d6205fa4c187bd078aefc20ea35dd1892aff643a7d21a0

  • SSDEEP

    1536:MPz43i6EJ02LyV3kFdp+0zI1ZBjhRDmmHeIcinLJcoHQHF3i6EJ02LyV3rE:czLyV3kF21im+YLzLyV3I

Score
10/10

Malware Config

Targets

    • Target

      bbe7937b4c3198cbf46a8178753a63c987494d4f3a9798df65f8a57ce71f6941

    • Size

      276KB

    • MD5

      6cdcb0900130b5cce6a2ae36868c1d9b

    • SHA1

      05e2afbd095a163e6fac8822ed49ca565b688b39

    • SHA256

      bbe7937b4c3198cbf46a8178753a63c987494d4f3a9798df65f8a57ce71f6941

    • SHA512

      5f4cb49137167656ca482fd4e1e98c02a7e4e51a65a70a48179183e36a87fdf91e0596273255e0d931d6205fa4c187bd078aefc20ea35dd1892aff643a7d21a0

    • SSDEEP

      1536:MPz43i6EJ02LyV3kFdp+0zI1ZBjhRDmmHeIcinLJcoHQHF3i6EJ02LyV3rE:czLyV3kF21im+YLzLyV3I

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

MITRE ATT&CK Enterprise v6

Tasks