Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d
-
Size
5.5MB
-
Sample
221205-m36v6scg55
-
MD5
517e7aa58030f24d452b083337b5afb1
-
SHA1
e2c687ee8dd9738f463f3e68352356693b6f400d
-
SHA256
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d
-
SHA512
9a51098159f2b841eedbf7545dc231a4f7f1ec7ce54fc1b4442a661237cc8414589b921356cc64b5c742058ef10613deef77fc9d77f50c4db294c527d750e562
-
SSDEEP
98304:i0qh0r0q2wf02GzMwDws0q40q0qC0FwwRZHwNwYwz0qm0S0qC0mR2wqEwE0qJ0nk:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHT
Behavioral task
behavioral1
Sample
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d
-
Size
5.5MB
-
MD5
517e7aa58030f24d452b083337b5afb1
-
SHA1
e2c687ee8dd9738f463f3e68352356693b6f400d
-
SHA256
7d43d1dd7550c9240e598f048953b7233a66ecde0d6e4ec39a4fd1626a46b91d
-
SHA512
9a51098159f2b841eedbf7545dc231a4f7f1ec7ce54fc1b4442a661237cc8414589b921356cc64b5c742058ef10613deef77fc9d77f50c4db294c527d750e562
-
SSDEEP
98304:i0qh0r0q2wf02GzMwDws0q40q0qC0FwwRZHwNwYwz0qm0S0qC0mR2wqEwE0qJ0nk:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHT
Score10/10-
Modifies WinLogon for persistence
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon
-
Drops file in System32 directory
-