Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Backdoor.zip

  • Size

    41KB

  • Sample

    240105-nhefvsadgk

  • MD5

    2a921a0700e9c1c304421d0626da76d8

  • SHA1

    eb537eded51b218a44f03035f6af5f04accadd20

  • SHA256

    546557e4edb59377b485ba4e49d1c35ae2f3a2b9566d0161f67edad73be5c68f

  • SHA512

    26c8624bb1054da22ccfaeea8fa683375fc78152f46200cbb159eb03867c253fa6aec2adb3f00eb774fceecf827dccbc6304bd55f644f92dc0a92256fd7320e2

  • SSDEEP

    768:ixONuKhl3QRE6Wz042UjjZ5uU/Th6p1IRM20veUJDJ7Q74:IJKhBX6Wz32U3PXTh6jUM20veyQ74

Score
6/10

Malware Config

Targets

    • Target

      1 (1).exe

    • Size

      64KB

    • MD5

      da153aeec67f15789dfd9ba3bd4b4d92

    • SHA1

      75f3e69d641f596ccb4dc6056476b7a2b7c73603

    • SHA256

      e9762c08760d6994b8b5447b9b33a0b6871ecc1f5dc700072f913c2f5bca4c76

    • SHA512

      db473b135df641c90a54cc8f8d241d531db23c732b68013624e53c221408ce587901517310161474570fd94e7e08823d93b263508c89d70e22e36779437bed2b

    • SSDEEP

      768:YVTQ+jZAZucMXh6Qy0sOF8P4V7wmdUm1a8k0n:YVTbJcMXcwF8PgZP1aK

    Score
    6/10
    • Adds Run key to start application

    • Blocklisted process makes network request

    • Target

      1 (2).exe

    • Size

      64KB

    • MD5

      d05b3d0cad5b43b8557142eeed107515

    • SHA1

      9ae9413d787932c38653b2c9d805aaca6d0300b1

    • SHA256

      3f41c34b22f669da1bc0bd91f170dcb60b8f3553135c6d5e16601995593c56cc

    • SHA512

      d76d3ce517aca5ca3ba6fc9a0674fd7512523d690105108b8771605a8a2b9f94bf0d322b9ca1eb0c4a4921c4a55572b06f320baa48dea01b1ddd4c5c633a9ea8

    • SSDEEP

      768:YVTQ+jZAZ3cMXh6Qy0sOF8P4V7wmdUm1a8k0n:YVTb0cMXcwF8PgZP1aK

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks