Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    250KB

  • Sample

    231115-3c4k5aee59

  • MD5

    af3b051d8a6a33705bd095b6d5608355

  • SHA1

    5d40bc70952705708d9bd87f1057e3e05d941b68

  • SHA256

    b760fd1b8d86af6b67ac24e6a269f2ffbc818d37f7930fb562cce1331213d031

  • SHA512

    7ed56d5ff9148b891894acb096b400623ac45e5913bd3a10e0462dc8ed93b49e43ebb51b2b0b851a16f867ff9f30922f1c5c6ed1b6c467e197f96999fc50d77f

  • SSDEEP

    3072:lNL7jL+5ScekHLTlZGTfobBKgJLR2ghco9CR:XPL+ocFHPlZGQKpi

Malware Config

Targets

    • Target

      file.exe

    • Size

      250KB

    • MD5

      af3b051d8a6a33705bd095b6d5608355

    • SHA1

      5d40bc70952705708d9bd87f1057e3e05d941b68

    • SHA256

      b760fd1b8d86af6b67ac24e6a269f2ffbc818d37f7930fb562cce1331213d031

    • SHA512

      7ed56d5ff9148b891894acb096b400623ac45e5913bd3a10e0462dc8ed93b49e43ebb51b2b0b851a16f867ff9f30922f1c5c6ed1b6c467e197f96999fc50d77f

    • SSDEEP

      3072:lNL7jL+5ScekHLTlZGTfobBKgJLR2ghco9CR:XPL+ocFHPlZGQKpi

    • Downloads MZ/PE file

    • Deletes itself

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks