Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0f64927f808872134002e6c476853034

  • Size

    468KB

  • Sample

    231230-fnpvsaachp

  • MD5

    0f64927f808872134002e6c476853034

  • SHA1

    b9e32759db2cd93f447a86a4c3320c70bac9d56c

  • SHA256

    15c1952117c92b90f9d4d109e4fb0372edc4ecaaa6f75c1080f526638db760ff

  • SHA512

    6af064ba577e446f462a317d697e1eb89437abc9e1f8fbb53aaf0edab22860840e49c08fbfbb159641a90301b21ee9e0ea7ad550d64b95857aaa4bbd03acb186

  • SSDEEP

    6144:+HmfZ+FNDNTaceRgD/qO5DPRi3sV6QwtaBShaeTPiu5jcczFJLTraf:+HjFTacWYDPl6QwQksUisjz7Xra

Malware Config

Targets

    • Target

      0f64927f808872134002e6c476853034

    • Size

      468KB

    • MD5

      0f64927f808872134002e6c476853034

    • SHA1

      b9e32759db2cd93f447a86a4c3320c70bac9d56c

    • SHA256

      15c1952117c92b90f9d4d109e4fb0372edc4ecaaa6f75c1080f526638db760ff

    • SHA512

      6af064ba577e446f462a317d697e1eb89437abc9e1f8fbb53aaf0edab22860840e49c08fbfbb159641a90301b21ee9e0ea7ad550d64b95857aaa4bbd03acb186

    • SSDEEP

      6144:+HmfZ+FNDNTaceRgD/qO5DPRi3sV6QwtaBShaeTPiu5jcczFJLTraf:+HjFTacWYDPl6QwQksUisjz7Xra

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks