Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6774a06aa7558fce73fa53d9558eb7a3

  • Size

    49KB

  • Sample

    231226-mkezqsfbam

  • MD5

    6774a06aa7558fce73fa53d9558eb7a3

  • SHA1

    c8d3eb76606c9bd79c663fcaa69cadd9a13996a1

  • SHA256

    c1bbd17d3f641e494bc0a6808b74365ca93ebaf82b7a4675a50ed6f11724e562

  • SHA512

    eb8523f720e40d4d49669a486de143750d309d7ff6b3bd84ec7140565bf575e65434fd279219c4c08b776109330dfad90a82b26421148c02d3927705f2ecf745

  • SSDEEP

    1536:g7t7m5dUyHatEMwlYFCajqyBY+s7tp6o2oeqfRAY:gh7m5ahAMY+Ypn1eqfz

Malware Config

Targets

    • Target

      6774a06aa7558fce73fa53d9558eb7a3

    • Size

      49KB

    • MD5

      6774a06aa7558fce73fa53d9558eb7a3

    • SHA1

      c8d3eb76606c9bd79c663fcaa69cadd9a13996a1

    • SHA256

      c1bbd17d3f641e494bc0a6808b74365ca93ebaf82b7a4675a50ed6f11724e562

    • SHA512

      eb8523f720e40d4d49669a486de143750d309d7ff6b3bd84ec7140565bf575e65434fd279219c4c08b776109330dfad90a82b26421148c02d3927705f2ecf745

    • SSDEEP

      1536:g7t7m5dUyHatEMwlYFCajqyBY+s7tp6o2oeqfRAY:gh7m5ahAMY+Ypn1eqfz

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks