Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a34bf5cbd6f2730a32c5db4b7ac1a6aa4172e81ce2f1f341fd9b5fdd0b110532

  • Size

    6.9MB

  • Sample

    231210-zghbxacabn

  • MD5

    3bb88364f8cbe63498e7f503c3cea8f0

  • SHA1

    bd031607e6a5d229aa71a56a31bfca3ec12e65d5

  • SHA256

    a34bf5cbd6f2730a32c5db4b7ac1a6aa4172e81ce2f1f341fd9b5fdd0b110532

  • SHA512

    9475a65d722da36be64c158c1a48394386af7fe49632acc166a0b9432b0843fe1a349221d3abc455b0a75c75d8cbb3206990383175be613b3ff04b2986d134f0

  • SSDEEP

    98304:N+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:Qz25G6bV1yYDuZxCWQNhUU2uNzj

Score
7/10

Malware Config

Targets

    • Target

      a34bf5cbd6f2730a32c5db4b7ac1a6aa4172e81ce2f1f341fd9b5fdd0b110532

    • Size

      6.9MB

    • MD5

      3bb88364f8cbe63498e7f503c3cea8f0

    • SHA1

      bd031607e6a5d229aa71a56a31bfca3ec12e65d5

    • SHA256

      a34bf5cbd6f2730a32c5db4b7ac1a6aa4172e81ce2f1f341fd9b5fdd0b110532

    • SHA512

      9475a65d722da36be64c158c1a48394386af7fe49632acc166a0b9432b0843fe1a349221d3abc455b0a75c75d8cbb3206990383175be613b3ff04b2986d134f0

    • SSDEEP

      98304:N+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:Qz25G6bV1yYDuZxCWQNhUU2uNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks