Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1e6ce4afa0d06702bdaa4df79bb96397

  • Size

    705KB

  • Sample

    231230-2cxl5sebh9

  • MD5

    1e6ce4afa0d06702bdaa4df79bb96397

  • SHA1

    6001049ba66bf194f181cd2f19b02cb5f7abc533

  • SHA256

    2cc733b37d6df45873d5420f76cd7521f17ab0ddc4d49bcea9b0e43ba46b8e81

  • SHA512

    8527830ec8a42a27dfa737b63b01e0e4d83ccd7a8570b175d318b2870f8621c7a457bd343ed15cc9f82ac2834f79f784371619937c3a9a3e2240933680fdf6c2

  • SSDEEP

    12288:ODJnJM4OpSpnO8kTalhrR41pC3blElJe3Y387WQWKmc7:mJnJM4OqTW8hC7CLu4rWD

Malware Config

Targets

    • Target

      1e6ce4afa0d06702bdaa4df79bb96397

    • Size

      705KB

    • MD5

      1e6ce4afa0d06702bdaa4df79bb96397

    • SHA1

      6001049ba66bf194f181cd2f19b02cb5f7abc533

    • SHA256

      2cc733b37d6df45873d5420f76cd7521f17ab0ddc4d49bcea9b0e43ba46b8e81

    • SHA512

      8527830ec8a42a27dfa737b63b01e0e4d83ccd7a8570b175d318b2870f8621c7a457bd343ed15cc9f82ac2834f79f784371619937c3a9a3e2240933680fdf6c2

    • SSDEEP

      12288:ODJnJM4OpSpnO8kTalhrR41pC3blElJe3Y387WQWKmc7:mJnJM4OqTW8hC7CLu4rWD

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks