Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
25ed00bc4a03bbbab0ae0ccb79a1b9a9
-
Size
4.1MB
-
Sample
231231-dqd5ysfcbl
-
MD5
25ed00bc4a03bbbab0ae0ccb79a1b9a9
-
SHA1
22314ffe0affc7d952e93c758624c299afa5f0a6
-
SHA256
5b7dd393e5bd12b7998b78b777324dd882fa8621889f9c4bdc9537574e5e4b22
-
SHA512
80dfe42479b41f7d08fc6f2f970315b868b2e249f3d03b98fe897bb33d497e3422b7e95c7ec6bda98a2098de05c31793d3fdfc43a332d3e60bae06d972e624db
-
SSDEEP
98304:Hz7Xb6rg/JwCcJnsgt1vdo08s2JpQpwh4Vlmfxl7+:/Xb6rgxcp99dIJpQp7Lm6
Static task
static1
Behavioral task
behavioral1
Sample
25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
25ed00bc4a03bbbab0ae0ccb79a1b9a9
-
Size
4.1MB
-
MD5
25ed00bc4a03bbbab0ae0ccb79a1b9a9
-
SHA1
22314ffe0affc7d952e93c758624c299afa5f0a6
-
SHA256
5b7dd393e5bd12b7998b78b777324dd882fa8621889f9c4bdc9537574e5e4b22
-
SHA512
80dfe42479b41f7d08fc6f2f970315b868b2e249f3d03b98fe897bb33d497e3422b7e95c7ec6bda98a2098de05c31793d3fdfc43a332d3e60bae06d972e624db
-
SSDEEP
98304:Hz7Xb6rg/JwCcJnsgt1vdo08s2JpQpwh4Vlmfxl7+:/Xb6rgxcp99dIJpQp7Lm6
Score8/10-
Modifies Windows Firewall
-
Stops running service(s)
-
Uses Session Manager for persistence
Creates Session Manager registry key to run executable early in system boot.
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
2Windows Service
2