Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1bc65d04c6c226b94dd69dab82b71963
-
Size
381KB
-
Sample
231225-ae19kaghhm
-
MD5
1bc65d04c6c226b94dd69dab82b71963
-
SHA1
3baab18e077adaec6b2425ea12a40cea69519a5b
-
SHA256
b881cbf09afdfebad4498fc26069d795dedbd2b94615b0525a9471037243539e
-
SHA512
ceeabb833fc9a997f8e345daf67a239d8267ba98cc425248e0cc7c39e5219c6587902ac772a1e3bac9ce598c4613d0b0eb94ae97a2d6d712310d660886973d6a
-
SSDEEP
6144:mRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4y6yCZ4IGfF:WqmpplpGoGL3etQoMiXM8gxf/Sj4yy4t
Static task
static1
Behavioral task
behavioral1
Sample
1bc65d04c6c226b94dd69dab82b71963.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
1bc65d04c6c226b94dd69dab82b71963
-
Size
381KB
-
MD5
1bc65d04c6c226b94dd69dab82b71963
-
SHA1
3baab18e077adaec6b2425ea12a40cea69519a5b
-
SHA256
b881cbf09afdfebad4498fc26069d795dedbd2b94615b0525a9471037243539e
-
SHA512
ceeabb833fc9a997f8e345daf67a239d8267ba98cc425248e0cc7c39e5219c6587902ac772a1e3bac9ce598c4613d0b0eb94ae97a2d6d712310d660886973d6a
-
SSDEEP
6144:mRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4y6yCZ4IGfF:WqmpplpGoGL3etQoMiXM8gxf/Sj4yy4t
Score10/10-
Modifies WinLogon for persistence
-
Adds policy Run key to start application
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies WinLogon
-
Drops file in System32 directory
-