Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
01712cc25c0c3cfcfab253e2cad522cd
-
Size
12.8MB
-
Sample
231225-dg33qaefbp
-
MD5
01712cc25c0c3cfcfab253e2cad522cd
-
SHA1
93696f36d9ce738af89157525cdf9aeaf4865281
-
SHA256
7d18bef53b53754a23ae16ded0805921fd40ee40e507fc80460a92615fe4b04b
-
SHA512
0ae8306a2a045300c2a0cf6eb1aa08fdc10ad7c155c6ccfa2deb1bad4330e383063bb16b5ff136466c440d0b33ee8da92a0c9c2159c38b6ef2173cf6571f0bae
-
SSDEEP
98304:uKlllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllB:
Static task
static1
Behavioral task
behavioral1
Sample
01712cc25c0c3cfcfab253e2cad522cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01712cc25c0c3cfcfab253e2cad522cd.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
tofsee
43.231.4.7
lazystax.ru
Targets
-
-
Target
01712cc25c0c3cfcfab253e2cad522cd
-
Size
12.8MB
-
MD5
01712cc25c0c3cfcfab253e2cad522cd
-
SHA1
93696f36d9ce738af89157525cdf9aeaf4865281
-
SHA256
7d18bef53b53754a23ae16ded0805921fd40ee40e507fc80460a92615fe4b04b
-
SHA512
0ae8306a2a045300c2a0cf6eb1aa08fdc10ad7c155c6ccfa2deb1bad4330e383063bb16b5ff136466c440d0b33ee8da92a0c9c2159c38b6ef2173cf6571f0bae
-
SSDEEP
98304:uKlllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllB:
Score10/10-
Creates new service(s)
-
Modifies Windows Firewall
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2