Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a681fdf33264e7f340991b816e3cec6ac455db0a

  • Size

    408KB

  • Sample

    230110-crzbvadb4v

  • MD5

    c6cf58f9cccc6dd123365d32af50e348

  • SHA1

    a681fdf33264e7f340991b816e3cec6ac455db0a

  • SHA256

    3e87745a25a634424d544e4fc4dba2d7f99f6c483aaa32dd6a8b293ec4f473b3

  • SHA512

    cf52beee0cc649dd5cc06b49cb649b1380b0e236558c8370fc3a7ac23c8e03948df1f99986bd544969112a270a25c698e22606e121bb7d63f43902ec34e03f58

  • SSDEEP

    12288:gqyuF2dxmh6ZfYqAlSnshDvDJIxFunmcqOOi:7smhmdshv90umq3

Malware Config

Targets

    • Target

      a681fdf33264e7f340991b816e3cec6ac455db0a

    • Size

      408KB

    • MD5

      c6cf58f9cccc6dd123365d32af50e348

    • SHA1

      a681fdf33264e7f340991b816e3cec6ac455db0a

    • SHA256

      3e87745a25a634424d544e4fc4dba2d7f99f6c483aaa32dd6a8b293ec4f473b3

    • SHA512

      cf52beee0cc649dd5cc06b49cb649b1380b0e236558c8370fc3a7ac23c8e03948df1f99986bd544969112a270a25c698e22606e121bb7d63f43902ec34e03f58

    • SSDEEP

      12288:gqyuF2dxmh6ZfYqAlSnshDvDJIxFunmcqOOi:7smhmdshv90umq3

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks