Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
599efaa8ae4f37beda54f57b98b09da0
-
Size
456KB
-
Sample
231226-g8l53agce6
-
MD5
599efaa8ae4f37beda54f57b98b09da0
-
SHA1
140022bf32af7d27896d8e85af3c42d49ae4b5da
-
SHA256
24b7d682b49cdce81fd7a6f9832a9c634ba2bd14fef7dd43ee92797d1def4f54
-
SHA512
aa70e5cbb83e79c75abe557dd57c6504969744f39398fb32089a0b61857c69bf46d983e4ada2ead80a2a6a1d7149431c3804a423e354cac0afaace92fa6ab2f3
-
SSDEEP
6144:J4TmSt9uNNtXlD2K0Hp/59dB9SzH2xLBzWjKEyS4X1OGTUX7x8A3u:xYQtXlD2N7SD2xF0BY1DTUX7x8A3
Static task
static1
Behavioral task
behavioral1
Sample
599efaa8ae4f37beda54f57b98b09da0.dll
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
599efaa8ae4f37beda54f57b98b09da0
-
Size
456KB
-
MD5
599efaa8ae4f37beda54f57b98b09da0
-
SHA1
140022bf32af7d27896d8e85af3c42d49ae4b5da
-
SHA256
24b7d682b49cdce81fd7a6f9832a9c634ba2bd14fef7dd43ee92797d1def4f54
-
SHA512
aa70e5cbb83e79c75abe557dd57c6504969744f39398fb32089a0b61857c69bf46d983e4ada2ead80a2a6a1d7149431c3804a423e354cac0afaace92fa6ab2f3
-
SSDEEP
6144:J4TmSt9uNNtXlD2K0Hp/59dB9SzH2xLBzWjKEyS4X1OGTUX7x8A3u:xYQtXlD2N7SD2xF0BY1DTUX7x8A3
-
Modifies WinLogon for persistence
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1