Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    46cd9ad791190d26c673e485bf7c0c2c

  • Size

    73KB

  • Sample

    240106-v4nd8aebe9

  • MD5

    46cd9ad791190d26c673e485bf7c0c2c

  • SHA1

    1c7609e268dce61118741ba8f00a483732bf216f

  • SHA256

    3a8fdeb39f3f0a2adfefc1e037153bbce88368cf87660530c9504499212d1eb5

  • SHA512

    da21b3d01d780c7d73d45e0ab4d71976c6f62534ee5903ce096b363e66b516f92fe5143973d89046a7676746dc9507a6b17cc7e2b58586a54339dc52ea987f9d

  • SSDEEP

    1536:NXSv0PZv5LLLLLLLL555vbbPZrrXZLrrrrNGXEypiOCjFp6WLNOKJ8tlzWnLTyvQ:BSv0PZv5LLLLLLLL555vbbPZrrXZLrrb

Score
10/10

Malware Config

Targets

    • Target

      46cd9ad791190d26c673e485bf7c0c2c

    • Size

      73KB

    • MD5

      46cd9ad791190d26c673e485bf7c0c2c

    • SHA1

      1c7609e268dce61118741ba8f00a483732bf216f

    • SHA256

      3a8fdeb39f3f0a2adfefc1e037153bbce88368cf87660530c9504499212d1eb5

    • SHA512

      da21b3d01d780c7d73d45e0ab4d71976c6f62534ee5903ce096b363e66b516f92fe5143973d89046a7676746dc9507a6b17cc7e2b58586a54339dc52ea987f9d

    • SSDEEP

      1536:NXSv0PZv5LLLLLLLL555vbbPZrrXZLrrrrNGXEypiOCjFp6WLNOKJ8tlzWnLTyvQ:BSv0PZv5LLLLLLLL555vbbPZrrXZLrrb

    Score
    10/10
    • Modifies WinLogon for persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks