Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1fc4b76637fb8bb31641c6c072050f7be5af9f569c7f1fb5b00fc2f27f725a3

  • Size

    5.6MB

  • Sample

    231104-etxl5sed68

  • MD5

    9da07df356aad76d50d9b5a3d7307f02

  • SHA1

    24cb2dd576e9f943f7104e2d01f85f5341326047

  • SHA256

    a1fc4b76637fb8bb31641c6c072050f7be5af9f569c7f1fb5b00fc2f27f725a3

  • SHA512

    3dc797842a3e6d1b7a6942262443fb77a2824797799fe5d8f1bc0421f1d745d45fc9ab47dc2b5cc88db704861dcf47f7feedcd60fce7508bb1affc61a78c69e8

  • SSDEEP

    98304:riRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:uRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10

Malware Config

Targets

    • Target

      a1fc4b76637fb8bb31641c6c072050f7be5af9f569c7f1fb5b00fc2f27f725a3

    • Size

      5.6MB

    • MD5

      9da07df356aad76d50d9b5a3d7307f02

    • SHA1

      24cb2dd576e9f943f7104e2d01f85f5341326047

    • SHA256

      a1fc4b76637fb8bb31641c6c072050f7be5af9f569c7f1fb5b00fc2f27f725a3

    • SHA512

      3dc797842a3e6d1b7a6942262443fb77a2824797799fe5d8f1bc0421f1d745d45fc9ab47dc2b5cc88db704861dcf47f7feedcd60fce7508bb1affc61a78c69e8

    • SSDEEP

      98304:riRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:uRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks