Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    588eb6277331743b4ec78c1f379c40a5af5871099b5920aaf5a4cc74e89a5493

  • Size

    771KB

  • Sample

    240103-hnclkacber

  • MD5

    fcc58f91d8644143912b6591dc850824

  • SHA1

    439b71f9dc47615d9855dfaa59ce7d92a9cb3c01

  • SHA256

    588eb6277331743b4ec78c1f379c40a5af5871099b5920aaf5a4cc74e89a5493

  • SHA512

    5feb5b05fc4de9390b2031ddb03c0a0ed7c00740843c36bb5059f1b25a22f1f77b12d59214732d581eb1a8b0ce6dfedf55e7cf26457a2f161445d81111011499

  • SSDEEP

    12288:U761vvrXBDZZmDmSh7SHSjX4z4ZV4kzI6OcGfAkx4tOF6j+Z:U7qvrXo7ZNX4z4YbcGfAkx4tNE

Score
8/10

Malware Config

Targets

    • Target

      588eb6277331743b4ec78c1f379c40a5af5871099b5920aaf5a4cc74e89a5493

    • Size

      771KB

    • MD5

      fcc58f91d8644143912b6591dc850824

    • SHA1

      439b71f9dc47615d9855dfaa59ce7d92a9cb3c01

    • SHA256

      588eb6277331743b4ec78c1f379c40a5af5871099b5920aaf5a4cc74e89a5493

    • SHA512

      5feb5b05fc4de9390b2031ddb03c0a0ed7c00740843c36bb5059f1b25a22f1f77b12d59214732d581eb1a8b0ce6dfedf55e7cf26457a2f161445d81111011499

    • SSDEEP

      12288:U761vvrXBDZZmDmSh7SHSjX4z4ZV4kzI6OcGfAkx4tOF6j+Z:U7qvrXo7ZNX4z4YbcGfAkx4tNE

    Score
    8/10
    • Downloads MZ/PE file

    • Modifies Windows Firewall

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks