Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b3772d8e8eb2a4032704616f5c0ea09623ffa7a67e921851a10f6fcb73ad70ce.7z
-
Size
1.1MB
-
Sample
230720-xhvmhsaa74
-
MD5
780ed6e2d38b779c07d7dee40679f83e
-
SHA1
cdee6eb9b35edb47280aa17b4afa5a70aee81d6d
-
SHA256
c4dc5ee700c22659626ffc56506bd3c3938746a41f8c3c9ccf2d20d13ce862cb
-
SHA512
ae3fa85602374bd9498185e3460fe14885214f9a18fa41b8c21d7ca3ed4a31301ade3205ffc8301d0af2b8a5a931e35df42796f1fc940f25f1398a6072c41919
-
SSDEEP
24576:tDL8If/lHY5FlrxmSm8H3jKSAAEPpASCiYY6pJoNTs4oAk2+kp:hL8I3Qm8HzGAOpwi16jYsxL2X
Static task
static1
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
b3772d8e8eb2a4032704616f5c0ea09623ffa7a67e921851a10f6fcb73ad70ce
-
Size
12.1MB
-
MD5
9f84cf13bf08eb24ece2f9d241b2c653
-
SHA1
b609811f96c4cdd989b07dde352c0112de129dca
-
SHA256
b3772d8e8eb2a4032704616f5c0ea09623ffa7a67e921851a10f6fcb73ad70ce
-
SHA512
693299ec0c4bc514dcc42ae674de32c9a5be1ccde8ed41e91dda6f015046abb47472042c09ce0d4cf7982bff382e1a14a28942ce0079c125a35363a00356f020
-
SSDEEP
393216:xZyUH+5MD1W5uKLIg56cMTVZ8b6InE842w:xZyUH+5MD1W5uKLIg56cMTVZ8b6IE84T
-
Modifies firewall policy service
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5