Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    76718972a1c9983da79829d936ae4652

  • Size

    585KB

  • Sample

    231226-r3l8zsgden

  • MD5

    76718972a1c9983da79829d936ae4652

  • SHA1

    2bcea2922323b2012c40978402e9f3fb3fe9fdb2

  • SHA256

    b111ebeea6ee904a67982e7fca339c8017482b555e1819a7eddf00a88b9da4ae

  • SHA512

    acfd2f095283be9999a9325de132fef59d5982ea6a55a1ca9affa0d32070e73962077779cb489b467505f3763db28cd2ee9ba9dd6767a26cd312448c3f11af76

  • SSDEEP

    12288:8TiHFgvJN0bbqMffOzZYpfKPh9KVc1BvpWusp9UIWFaOWQ/yird:CiSvJKfOVWGK+PvpWuiWIpO

Malware Config

Targets

    • Target

      76718972a1c9983da79829d936ae4652

    • Size

      585KB

    • MD5

      76718972a1c9983da79829d936ae4652

    • SHA1

      2bcea2922323b2012c40978402e9f3fb3fe9fdb2

    • SHA256

      b111ebeea6ee904a67982e7fca339c8017482b555e1819a7eddf00a88b9da4ae

    • SHA512

      acfd2f095283be9999a9325de132fef59d5982ea6a55a1ca9affa0d32070e73962077779cb489b467505f3763db28cd2ee9ba9dd6767a26cd312448c3f11af76

    • SSDEEP

      12288:8TiHFgvJN0bbqMffOzZYpfKPh9KVc1BvpWusp9UIWFaOWQ/yird:CiSvJKfOVWGK+PvpWuiWIpO

    • Modifies WinLogon for persistence

    • UAC bypass

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks