Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    783961754c23eff034cbe6a5e35687b5aa4eff8b

  • Size

    392KB

  • Sample

    230110-ctckvshf82

  • MD5

    b3cc8da8ef5c647d134c7cbdf8de4b69

  • SHA1

    783961754c23eff034cbe6a5e35687b5aa4eff8b

  • SHA256

    7c6775300f8676b0c3a47136f39633b9aaa9347a18c7442c14ec4a540062510a

  • SHA512

    ac20644d9581823cb4599dc55b1aa178ccea7c29bb1bcfddf2306f82c1e33cd2285acb1abd05fb4c49b54e32c5f6c149d77f6058224ab8bce042ad7452033d53

  • SSDEEP

    12288:oDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:YR9eyWKwkJxruLUb

Malware Config

Targets

    • Target

      783961754c23eff034cbe6a5e35687b5aa4eff8b

    • Size

      392KB

    • MD5

      b3cc8da8ef5c647d134c7cbdf8de4b69

    • SHA1

      783961754c23eff034cbe6a5e35687b5aa4eff8b

    • SHA256

      7c6775300f8676b0c3a47136f39633b9aaa9347a18c7442c14ec4a540062510a

    • SHA512

      ac20644d9581823cb4599dc55b1aa178ccea7c29bb1bcfddf2306f82c1e33cd2285acb1abd05fb4c49b54e32c5f6c149d77f6058224ab8bce042ad7452033d53

    • SSDEEP

      12288:oDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:YR9eyWKwkJxruLUb

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks