Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Image-Unstitcher.jar

  • Size

    22KB

  • Sample

    231021-xvkcbaag28

  • MD5

    ee925f46306fdc8e19265454a9aa1f83

  • SHA1

    2b45cef9750ebca29840cd9894a6a60dc2310352

  • SHA256

    80ddc435a98e1a997d85612fc81bf877012fbfb4148cc6ff99d13483e5981c3a

  • SHA512

    455df83badd4e61e3c60657139a43042268a3fe3c8d2dc55c4f0ad3681a6295a34aba641a9f2f43c695e54684928717c5a666b34603655d134f2e5c4628e217b

  • SSDEEP

    384:ctU2f6c0B7iipFcQyN2GuIAydwBhhwHm69LwQoa7UKz:cia0xf+lr9a+do1Kz

Malware Config

Targets

    • Target

      Image-Unstitcher.jar

    • Size

      22KB

    • MD5

      ee925f46306fdc8e19265454a9aa1f83

    • SHA1

      2b45cef9750ebca29840cd9894a6a60dc2310352

    • SHA256

      80ddc435a98e1a997d85612fc81bf877012fbfb4148cc6ff99d13483e5981c3a

    • SHA512

      455df83badd4e61e3c60657139a43042268a3fe3c8d2dc55c4f0ad3681a6295a34aba641a9f2f43c695e54684928717c5a666b34603655d134f2e5c4628e217b

    • SSDEEP

      384:ctU2f6c0B7iipFcQyN2GuIAydwBhhwHm69LwQoa7UKz:cia0xf+lr9a+do1Kz

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Possible privilege escalation attempt

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks