Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
49359f59e4941691a830ca441c3a2e2a.exe
-
Size
268KB
-
Sample
240107-xwajhadag5
-
MD5
49359f59e4941691a830ca441c3a2e2a
-
SHA1
ab279487771fad534d51cbf093728e19f7b2bb8b
-
SHA256
8ce94626e1c87b5ffd4443c3a30218e9be751de67aa36c3059885ab7b22c93a4
-
SHA512
22b03d2eb82068908919c1e062a63a234fc2e896d74e70a41dd43c7edafede631e08b482d9c8d7d5413a02666af9622a3e9af193b5c7bddb95e4f780a6defeda
-
SSDEEP
6144:6avaH8cS1kVZBr40ZhdOBL0vvIIhAOmkXkKAM:7RrqBr40raI1jUKAM
Static task
static1
Behavioral task
behavioral1
Sample
49359f59e4941691a830ca441c3a2e2a.exe
Resource
win7-20231215-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
49359f59e4941691a830ca441c3a2e2a.exe
-
Size
268KB
-
MD5
49359f59e4941691a830ca441c3a2e2a
-
SHA1
ab279487771fad534d51cbf093728e19f7b2bb8b
-
SHA256
8ce94626e1c87b5ffd4443c3a30218e9be751de67aa36c3059885ab7b22c93a4
-
SHA512
22b03d2eb82068908919c1e062a63a234fc2e896d74e70a41dd43c7edafede631e08b482d9c8d7d5413a02666af9622a3e9af193b5c7bddb95e4f780a6defeda
-
SSDEEP
6144:6avaH8cS1kVZBr40ZhdOBL0vvIIhAOmkXkKAM:7RrqBr40raI1jUKAM
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1