Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d55de05dfad137adbba7033ffedcc2dd7f90ff72224f0ba0014fc7d3fb805047

  • Size

    1.5MB

  • Sample

    231004-nhxx7sbb8t

  • MD5

    0f7ab493392658ce24f83899d5d79376

  • SHA1

    909cfda95467f4edf75d0097241a0367a9853152

  • SHA256

    d55de05dfad137adbba7033ffedcc2dd7f90ff72224f0ba0014fc7d3fb805047

  • SHA512

    ae446f3473b8f3dd4407893f6652fd0939c852eee12f1c7b537c4b3e31c0028d1bcc741d33e8f5cc3ce3e454db4eea60d3392be090171b90d767cc6fe4910761

  • SSDEEP

    24576:dym/g4gFtv1JVCAcK6Jzh2Bd6qUgSCU99xh0cVvAc6FITKadtCl4OuE8+LO:4wZgFZZL6RhAU5Cs0cxd66TZdtc8

Malware Config

Targets

    • Target

      d55de05dfad137adbba7033ffedcc2dd7f90ff72224f0ba0014fc7d3fb805047

    • Size

      1.5MB

    • MD5

      0f7ab493392658ce24f83899d5d79376

    • SHA1

      909cfda95467f4edf75d0097241a0367a9853152

    • SHA256

      d55de05dfad137adbba7033ffedcc2dd7f90ff72224f0ba0014fc7d3fb805047

    • SHA512

      ae446f3473b8f3dd4407893f6652fd0939c852eee12f1c7b537c4b3e31c0028d1bcc741d33e8f5cc3ce3e454db4eea60d3392be090171b90d767cc6fe4910761

    • SSDEEP

      24576:dym/g4gFtv1JVCAcK6Jzh2Bd6qUgSCU99xh0cVvAc6FITKadtCl4OuE8+LO:4wZgFZZL6RhAU5Cs0cxd66TZdtc8

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks