Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6b15f7525da0aa28eed5316a9ca99af3

  • Size

    205KB

  • Sample

    231226-npa21sdfaj

  • MD5

    6b15f7525da0aa28eed5316a9ca99af3

  • SHA1

    abf00e087b8474b85e172ed257738a0ea008cdbe

  • SHA256

    671b8553f41641e9d72ef472f239fca4f8d9d1ceb395f277b11935c6f7ac319c

  • SHA512

    982df863bb59a5fc3f516cc49264e3be796897992a90768207bbfe395e562dd4e45974d63ea23fa6547e06ae8e0f3f931659aaef31fe04daed935b589d2e463d

  • SSDEEP

    6144:g3qqDLwQXw/jSbaQm/2YBWs6RaIpL/tL2YoKPpthlWV0J6:gaqnwQujSbaQmF9IpL/Rf5la0s

Malware Config

Targets

    • Target

      6b15f7525da0aa28eed5316a9ca99af3

    • Size

      205KB

    • MD5

      6b15f7525da0aa28eed5316a9ca99af3

    • SHA1

      abf00e087b8474b85e172ed257738a0ea008cdbe

    • SHA256

      671b8553f41641e9d72ef472f239fca4f8d9d1ceb395f277b11935c6f7ac319c

    • SHA512

      982df863bb59a5fc3f516cc49264e3be796897992a90768207bbfe395e562dd4e45974d63ea23fa6547e06ae8e0f3f931659aaef31fe04daed935b589d2e463d

    • SSDEEP

      6144:g3qqDLwQXw/jSbaQm/2YBWs6RaIpL/tL2YoKPpthlWV0J6:gaqnwQujSbaQmF9IpL/Rf5la0s

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks