Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4

  • Size

    304KB

  • Sample

    221205-x3gw6abh5z

  • MD5

    537a444467d9a1460eaea26e903114c8

  • SHA1

    b5b5e0a83393e450619ea385d539c5f4cc474cde

  • SHA256

    952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4

  • SHA512

    f4dad3c64e2067654ef1ad51e53e9c280e7554e536311c241d2082440658cf6934df1475d4cee1410018567700d9331d5591ab575f81041a47dbfd174f0db639

  • SSDEEP

    3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Malware Config

Targets

    • Target

      952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4

    • Size

      304KB

    • MD5

      537a444467d9a1460eaea26e903114c8

    • SHA1

      b5b5e0a83393e450619ea385d539c5f4cc474cde

    • SHA256

      952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4

    • SHA512

      f4dad3c64e2067654ef1ad51e53e9c280e7554e536311c241d2082440658cf6934df1475d4cee1410018567700d9331d5591ab575f81041a47dbfd174f0db639

    • SSDEEP

      3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

    • Adds policy Run key to start application

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks