Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e649224914858253547ee6ba70732186cec92ef37c52c1408c3ced31340c329b

  • Size

    56KB

  • Sample

    221206-yca7csah5s

  • MD5

    1a5c255790c9271406af6645cecd03ab

  • SHA1

    3f652df3c9ce1cd45e07a530a84575178adec76e

  • SHA256

    e649224914858253547ee6ba70732186cec92ef37c52c1408c3ced31340c329b

  • SHA512

    c713bda3e8b925f24c5cff63ba932adc17c99e073941bfdbb98a1a99bc3e6f0f8b5ab70b316c585f430fa48766e1079522e99f5f8e86a3ce5e01076a14ab3f3e

  • SSDEEP

    1536:9RL6RMnU+DNu1wRvhrvNIxAKQcxu4h2mGs1SECzKiGgnouy8I:9RL6uU+DNTNhpytxpxYsizoutI

Score
10/10

Malware Config

Targets

    • Target

      e649224914858253547ee6ba70732186cec92ef37c52c1408c3ced31340c329b

    • Size

      56KB

    • MD5

      1a5c255790c9271406af6645cecd03ab

    • SHA1

      3f652df3c9ce1cd45e07a530a84575178adec76e

    • SHA256

      e649224914858253547ee6ba70732186cec92ef37c52c1408c3ced31340c329b

    • SHA512

      c713bda3e8b925f24c5cff63ba932adc17c99e073941bfdbb98a1a99bc3e6f0f8b5ab70b316c585f430fa48766e1079522e99f5f8e86a3ce5e01076a14ab3f3e

    • SSDEEP

      1536:9RL6RMnU+DNu1wRvhrvNIxAKQcxu4h2mGs1SECzKiGgnouy8I:9RL6uU+DNTNhpytxpxYsizoutI

    Score
    10/10
    • Modifies WinLogon for persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks