Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3c2ada8704508c3b60b26ff97dac350eefc7902ed6ab3c430d413f2333e9acfa

  • Size

    1.8MB

  • Sample

    231004-phmmxadf36

  • MD5

    e7d050576a5b6e710198b6a55c6db85d

  • SHA1

    aed3bf7d37a6d2efcd1e32c63a6045e331b34ecb

  • SHA256

    3c2ada8704508c3b60b26ff97dac350eefc7902ed6ab3c430d413f2333e9acfa

  • SHA512

    2a0fdfe6abe50ed7a6b0fa5ca358a0003da6f7fb992c3b65d7a4dd71d51b8d0a697c6718891cd4d93c82941e7144633939ad6ac95c659d15c43f61c38e54a8a2

  • SSDEEP

    49152:LIJSkiB6EAVkIpgPEAAtGZtG5MgGGpVyAKJ0PCa:MXiwvLFAbt2MidNC

Malware Config

Targets

    • Target

      3c2ada8704508c3b60b26ff97dac350eefc7902ed6ab3c430d413f2333e9acfa

    • Size

      1.8MB

    • MD5

      e7d050576a5b6e710198b6a55c6db85d

    • SHA1

      aed3bf7d37a6d2efcd1e32c63a6045e331b34ecb

    • SHA256

      3c2ada8704508c3b60b26ff97dac350eefc7902ed6ab3c430d413f2333e9acfa

    • SHA512

      2a0fdfe6abe50ed7a6b0fa5ca358a0003da6f7fb992c3b65d7a4dd71d51b8d0a697c6718891cd4d93c82941e7144633939ad6ac95c659d15c43f61c38e54a8a2

    • SSDEEP

      49152:LIJSkiB6EAVkIpgPEAAtGZtG5MgGGpVyAKJ0PCa:MXiwvLFAbt2MidNC

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Windows security modification

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks