Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1b210138a28907b555c06bf888a6f656

  • Size

    8.9MB

  • Sample

    231224-3y8f7shcd7

  • MD5

    1b210138a28907b555c06bf888a6f656

  • SHA1

    73f1559fd104ecde5e75fd82f11a94ab4275849d

  • SHA256

    e7f3c461470c7531a31a711fceb6980ceb88c8a806d574711097e6eaff3324a1

  • SHA512

    ee6d7840510fc8a89c2bef5cbd0cbb19a6c13bd76822d3cb59a0aaf4dd6de6bc2fece374bfd00039008b5bd8057f9903336385b063ed2e0bb3e2049d9d3613e0

  • SSDEEP

    196608:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxQw818dmXEQl1llLmiwlyif8cHQfgAXdmu:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxq

Malware Config

Targets

    • Target

      1b210138a28907b555c06bf888a6f656

    • Size

      8.9MB

    • MD5

      1b210138a28907b555c06bf888a6f656

    • SHA1

      73f1559fd104ecde5e75fd82f11a94ab4275849d

    • SHA256

      e7f3c461470c7531a31a711fceb6980ceb88c8a806d574711097e6eaff3324a1

    • SHA512

      ee6d7840510fc8a89c2bef5cbd0cbb19a6c13bd76822d3cb59a0aaf4dd6de6bc2fece374bfd00039008b5bd8057f9903336385b063ed2e0bb3e2049d9d3613e0

    • SSDEEP

      196608:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxQw818dmXEQl1llLmiwlyif8cHQfgAXdmu:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxq

    • Modifies WinLogon for persistence

    • Drops file in Drivers directory

    • Sets service image path in registry

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks