Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
26f18e04a196e2e85d8297086b338e30
-
Size
288KB
-
Sample
231231-edsy1scgap
-
MD5
26f18e04a196e2e85d8297086b338e30
-
SHA1
245e479278a7ca0356c9888e246f9e506739768b
-
SHA256
b136434e8995180965964fa8b46b50173b6a6f500c80fc5a2b548a008d749493
-
SHA512
ddde4d05a0b45249784af0aa68892a453b3f7cea46097ced149967702facc34047e6975f661a734a115b946f66b0705d929ecab64b3b4f690ba07660eaa6815c
-
SSDEEP
6144:xX8JXgMQUXu+9qjCTWeqKas8hiAHlkyvbhA5qLXtE8VZP6lnrlZdgpP:uGM7u+xWEAyeAGy8V168P
Static task
static1
Behavioral task
behavioral1
Sample
26f18e04a196e2e85d8297086b338e30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26f18e04a196e2e85d8297086b338e30.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
26f18e04a196e2e85d8297086b338e30
-
Size
288KB
-
MD5
26f18e04a196e2e85d8297086b338e30
-
SHA1
245e479278a7ca0356c9888e246f9e506739768b
-
SHA256
b136434e8995180965964fa8b46b50173b6a6f500c80fc5a2b548a008d749493
-
SHA512
ddde4d05a0b45249784af0aa68892a453b3f7cea46097ced149967702facc34047e6975f661a734a115b946f66b0705d929ecab64b3b4f690ba07660eaa6815c
-
SSDEEP
6144:xX8JXgMQUXu+9qjCTWeqKas8hiAHlkyvbhA5qLXtE8VZP6lnrlZdgpP:uGM7u+xWEAyeAGy8V168P
-
Modifies security service
-
Disables taskbar notifications via registry modification
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1