Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    045634f9dd4eaf2f5bccbebca37faa8f

  • Size

    100KB

  • Sample

    231229-z7v1padaak

  • MD5

    045634f9dd4eaf2f5bccbebca37faa8f

  • SHA1

    afd1b0ea0445c1a1bb74fd9c5b823f4ca4f4ae9a

  • SHA256

    e965571d6d96c552d28c34ca8793bc06561ed8d853ac724ce9c63ccf1ab4a172

  • SHA512

    8cad475c7042b9345e000527e2809e2d45f3ae1afd765471dc7843c433e9172985bf76af6876af72d86f40e8710aede8af237ca55a2f4fad198d9bc321700520

  • SSDEEP

    3072:EhaMqdtNFMQb7BBWfGtTcTyYcXAkomqbIy:gaMC77BpU3mqIy

Malware Config

Targets

    • Target

      045634f9dd4eaf2f5bccbebca37faa8f

    • Size

      100KB

    • MD5

      045634f9dd4eaf2f5bccbebca37faa8f

    • SHA1

      afd1b0ea0445c1a1bb74fd9c5b823f4ca4f4ae9a

    • SHA256

      e965571d6d96c552d28c34ca8793bc06561ed8d853ac724ce9c63ccf1ab4a172

    • SHA512

      8cad475c7042b9345e000527e2809e2d45f3ae1afd765471dc7843c433e9172985bf76af6876af72d86f40e8710aede8af237ca55a2f4fad198d9bc321700520

    • SSDEEP

      3072:EhaMqdtNFMQb7BBWfGtTcTyYcXAkomqbIy:gaMC77BpU3mqIy

    • Modifies AppInit DLL entries

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks