Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1a57bda633f943d2424d156d6349d9b5
-
Size
256KB
-
Sample
231224-3pc9psecej
-
MD5
1a57bda633f943d2424d156d6349d9b5
-
SHA1
6252d40d17986402270787147dc6c64658db3b87
-
SHA256
e3bec6ad234b5de48338971056cb689859b5336d05d0278562549c3d350f633a
-
SHA512
462a254b52d11d7dcdf3b8c0ed4bded5d3f1c396851aa844e6cc0812ea137a16685a5e70823563b7b61900bc9f042b3467801b7fc38b5c1781113898c5bff117
-
SSDEEP
6144:hHPXsmzaJtHQj7kHAM56DTmGvB5vmGvmdPF1v8Y:hvc0aJtQ/kghfmGv3vAPF1v8Y
Static task
static1
Behavioral task
behavioral1
Sample
1a57bda633f943d2424d156d6349d9b5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a57bda633f943d2424d156d6349d9b5.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
1a57bda633f943d2424d156d6349d9b5
-
Size
256KB
-
MD5
1a57bda633f943d2424d156d6349d9b5
-
SHA1
6252d40d17986402270787147dc6c64658db3b87
-
SHA256
e3bec6ad234b5de48338971056cb689859b5336d05d0278562549c3d350f633a
-
SHA512
462a254b52d11d7dcdf3b8c0ed4bded5d3f1c396851aa844e6cc0812ea137a16685a5e70823563b7b61900bc9f042b3467801b7fc38b5c1781113898c5bff117
-
SSDEEP
6144:hHPXsmzaJtHQj7kHAM56DTmGvB5vmGvmdPF1v8Y:hvc0aJtQ/kghfmGv3vAPF1v8Y
Score10/10-
Modifies firewall policy service
-
Adds policy Run key to start application
-
Modifies Installed Components in the registry
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
3Create or Modify System Process
1Windows Service
1