Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    05bb1cd74be52b3a6023dc450ae9c6a9

  • Size

    365KB

  • Sample

    231229-2g8vzaegbk

  • MD5

    05bb1cd74be52b3a6023dc450ae9c6a9

  • SHA1

    4f651c51f70fae5d36f1e40c4d385e310531528a

  • SHA256

    7fee6db599bdc55d600da75e6c2ebca5a6bd754405dd119f785cc3e94137a500

  • SHA512

    8a6d7aa3903a619ba27f4b9f11967a425da4e2d20cc02022570068cc3c298999774f46a46ee76749577b4335634bc03ffea12ae43187283db9b46b30a197ddc9

  • SSDEEP

    6144:5FQvx0NXgEJL8kTvI/qFUmZQab7T5kaRJMggJEEVlRbkSD+WyWIaNmp:5FQvC+EJVTU5OQdaRag4ESluSDj3q

Score
10/10

Malware Config

Targets

    • Target

      05bb1cd74be52b3a6023dc450ae9c6a9

    • Size

      365KB

    • MD5

      05bb1cd74be52b3a6023dc450ae9c6a9

    • SHA1

      4f651c51f70fae5d36f1e40c4d385e310531528a

    • SHA256

      7fee6db599bdc55d600da75e6c2ebca5a6bd754405dd119f785cc3e94137a500

    • SHA512

      8a6d7aa3903a619ba27f4b9f11967a425da4e2d20cc02022570068cc3c298999774f46a46ee76749577b4335634bc03ffea12ae43187283db9b46b30a197ddc9

    • SSDEEP

      6144:5FQvx0NXgEJL8kTvI/qFUmZQab7T5kaRJMggJEEVlRbkSD+WyWIaNmp:5FQvC+EJVTU5OQdaRag4ESluSDj3q

    Score
    10/10
    • Modifies WinLogon for persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks