Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
004ad8caf0a1a40a71a98447763586b2
-
Size
512KB
-
Sample
231229-wyz2hahaen
-
MD5
004ad8caf0a1a40a71a98447763586b2
-
SHA1
18b8b4f5b041ad306f8ba0c8a235f3798b55b09b
-
SHA256
f1ea84962eb6754cd1db5f3194f4965e1471348a6cdf52e704c1de9893369716
-
SHA512
e5f8faa318673b6e26781b078881342e7ecbc35acbdf44b75c7fde730787f2518b645f548aa4636226b1dca1ed104e84bbe68bbd8711af6af565379fbc0ba9b2
-
SSDEEP
384:AUOr5NKZ2K1I1KmPuL3T0gwB6U41fuJV4j18QYEjtMh5CezEyBYYOluf0j:0r5kWKo/8Uaf0YWQZy5REyFr+
Static task
static1
Behavioral task
behavioral1
Sample
004ad8caf0a1a40a71a98447763586b2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
004ad8caf0a1a40a71a98447763586b2.dll
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
004ad8caf0a1a40a71a98447763586b2
-
Size
512KB
-
MD5
004ad8caf0a1a40a71a98447763586b2
-
SHA1
18b8b4f5b041ad306f8ba0c8a235f3798b55b09b
-
SHA256
f1ea84962eb6754cd1db5f3194f4965e1471348a6cdf52e704c1de9893369716
-
SHA512
e5f8faa318673b6e26781b078881342e7ecbc35acbdf44b75c7fde730787f2518b645f548aa4636226b1dca1ed104e84bbe68bbd8711af6af565379fbc0ba9b2
-
SSDEEP
384:AUOr5NKZ2K1I1KmPuL3T0gwB6U41fuJV4j18QYEjtMh5CezEyBYYOluf0j:0r5kWKo/8Uaf0YWQZy5REyFr+
Score10/10-
Modifies firewall policy service
-
Modifies AppInit DLL entries
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1