Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    134cce8f1b8c29cf49d732e310abaebe

  • Size

    169KB

  • Sample

    231225-kvc7saeban

  • MD5

    134cce8f1b8c29cf49d732e310abaebe

  • SHA1

    30a8e6a9f8634694baaf6fe255dab3f8b2970376

  • SHA256

    e259017d25afeb189c2835a1e2ae17cd874fb040c7ac15f62e5651f8754bbe41

  • SHA512

    99e58940834cfbec5997f428b1040a671c931e4abba0e0f5d542432587f2603447b9ace9258fd865212ceefe84bf4cf4e47417f1c84400ba98ee47eaa3d46933

  • SSDEEP

    3072:wzxBux14OFN/l1XyUDVI4F97URnh5xcnWPTAdxboY1fbH/YPo:wutoN5Twx8u/

Malware Config

Targets

    • Target

      134cce8f1b8c29cf49d732e310abaebe

    • Size

      169KB

    • MD5

      134cce8f1b8c29cf49d732e310abaebe

    • SHA1

      30a8e6a9f8634694baaf6fe255dab3f8b2970376

    • SHA256

      e259017d25afeb189c2835a1e2ae17cd874fb040c7ac15f62e5651f8754bbe41

    • SHA512

      99e58940834cfbec5997f428b1040a671c931e4abba0e0f5d542432587f2603447b9ace9258fd865212ceefe84bf4cf4e47417f1c84400ba98ee47eaa3d46933

    • SSDEEP

      3072:wzxBux14OFN/l1XyUDVI4F97URnh5xcnWPTAdxboY1fbH/YPo:wutoN5Twx8u/

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks