Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    debf3b2f4ea28f799fd64d831d1f4321d27e5f2e3eb3ca079ee6f709a7c48e3f

  • Size

    4.0MB

  • Sample

    231111-t3527sae73

  • MD5

    30fd7c0c0f625012a4ede482f445f3c8

  • SHA1

    59dfc98f4ca1a6835f8a1cf06ceb07a1e01e1c42

  • SHA256

    debf3b2f4ea28f799fd64d831d1f4321d27e5f2e3eb3ca079ee6f709a7c48e3f

  • SHA512

    4455a4fcdb6f050a920c13d85b0e7f5bebdd68ba174518214a552662dc8236aa9f683171d004fb905d1ac0fd920a909e7446d1cc6640eaef6b13a9d83b1c09e0

  • SSDEEP

    98304:HdHsdNZFu6xd3CZangMbxlif4HwNoVnH6vhkL+unlqnf7e:9HsdNZFu4Co0fEw6VnHoPnf7e

Score
7/10

Malware Config

Targets

    • Target

      debf3b2f4ea28f799fd64d831d1f4321d27e5f2e3eb3ca079ee6f709a7c48e3f

    • Size

      4.0MB

    • MD5

      30fd7c0c0f625012a4ede482f445f3c8

    • SHA1

      59dfc98f4ca1a6835f8a1cf06ceb07a1e01e1c42

    • SHA256

      debf3b2f4ea28f799fd64d831d1f4321d27e5f2e3eb3ca079ee6f709a7c48e3f

    • SHA512

      4455a4fcdb6f050a920c13d85b0e7f5bebdd68ba174518214a552662dc8236aa9f683171d004fb905d1ac0fd920a909e7446d1cc6640eaef6b13a9d83b1c09e0

    • SSDEEP

      98304:HdHsdNZFu6xd3CZangMbxlif4HwNoVnH6vhkL+unlqnf7e:9HsdNZFu4Co0fEw6VnHoPnf7e

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks