Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    40c4b11105db1386e30bc870183a6499

  • Size

    354KB

  • Sample

    240104-nt3b3ahdd7

  • MD5

    40c4b11105db1386e30bc870183a6499

  • SHA1

    c91b01612d0a67a9200a6f0780d554a5c1e321fd

  • SHA256

    ec93dd2c8432d31d3be69a3538a20fd344090246dd7289a2db829d9048ce9b5e

  • SHA512

    70fb8f93c6c48cd890990ccb3a8ae85851ba44e94c294cf4aa1760bcdc20daae3e77ad381fbb699e1eb473223643d518f0c47a8955d9f1d700ace5128a575c59

  • SSDEEP

    6144:I2pRrUqddTQZokHv1rQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkP1UJZIIJpkDrF1SoP/dTBk1/3

Score
10/10

Malware Config

Targets

    • Target

      40c4b11105db1386e30bc870183a6499

    • Size

      354KB

    • MD5

      40c4b11105db1386e30bc870183a6499

    • SHA1

      c91b01612d0a67a9200a6f0780d554a5c1e321fd

    • SHA256

      ec93dd2c8432d31d3be69a3538a20fd344090246dd7289a2db829d9048ce9b5e

    • SHA512

      70fb8f93c6c48cd890990ccb3a8ae85851ba44e94c294cf4aa1760bcdc20daae3e77ad381fbb699e1eb473223643d518f0c47a8955d9f1d700ace5128a575c59

    • SSDEEP

      6144:I2pRrUqddTQZokHv1rQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkP1UJZIIJpkDrF1SoP/dTBk1/3

    Score
    10/10
    • Modifies WinLogon for persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks