Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    018df191f0db6e21907cc999d9f6467c

  • Size

    294KB

  • Sample

    231224-rzq3rsgcdn

  • MD5

    018df191f0db6e21907cc999d9f6467c

  • SHA1

    1557261aa56ecd7f355f104b80ad8ad2f620eee2

  • SHA256

    08dad3498c2ab4855eac9c9324fca017308b5aa1bc573c95c37148b4ed89f08d

  • SHA512

    2e440a1d343981a457e6ca0459b67c8be574173f49f90e72530de8c8f36727c322d3136d39b2dac0ea78fe2b6a889bc0c1d889939917cf11916b79e8b610b955

  • SSDEEP

    6144:wz4aVvv5nsxGlx4fbDHHWnQP9anNRrLYW92Q9WnlJifcUWsOC8rlo:wEaVnx2Glxqbbf9Lw9WngUy8rlo

Score
8/10

Malware Config

Targets

    • Target

      018df191f0db6e21907cc999d9f6467c

    • Size

      294KB

    • MD5

      018df191f0db6e21907cc999d9f6467c

    • SHA1

      1557261aa56ecd7f355f104b80ad8ad2f620eee2

    • SHA256

      08dad3498c2ab4855eac9c9324fca017308b5aa1bc573c95c37148b4ed89f08d

    • SHA512

      2e440a1d343981a457e6ca0459b67c8be574173f49f90e72530de8c8f36727c322d3136d39b2dac0ea78fe2b6a889bc0c1d889939917cf11916b79e8b610b955

    • SSDEEP

      6144:wz4aVvv5nsxGlx4fbDHHWnQP9anNRrLYW92Q9WnlJifcUWsOC8rlo:wEaVnx2Glxqbbf9Lw9WngUy8rlo

    Score
    8/10
    • Modifies Windows Firewall

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks