Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    54643009b12fa41b6e67403b6eb628de

  • Size

    28KB

  • Sample

    240111-x9gjzafef5

  • MD5

    54643009b12fa41b6e67403b6eb628de

  • SHA1

    a2564e6ec225af5d1ce906c05d322ba2728fc1cc

  • SHA256

    86c9212b7970d70b2d7141fd0ea9178603d149f3d78ffb57496b437f2e60f4a6

  • SHA512

    ff5705522b332d762752f1eab2c378e4593dd49fbecc4d2c1d2bd5a12859271df89815d0168956179e168172b0effb31cb7a326e851d2d77081dedd40a866b93

  • SSDEEP

    384:nOy0MyjKoJpjS9Os5zgBo3EyCKS/Lp8EId+v9hq8YnX+9aNJawcudoD7U:nRydj+Os5CoUyij1lhXYuAnbcuyD7U

Malware Config

Targets

    • Target

      54643009b12fa41b6e67403b6eb628de

    • Size

      28KB

    • MD5

      54643009b12fa41b6e67403b6eb628de

    • SHA1

      a2564e6ec225af5d1ce906c05d322ba2728fc1cc

    • SHA256

      86c9212b7970d70b2d7141fd0ea9178603d149f3d78ffb57496b437f2e60f4a6

    • SHA512

      ff5705522b332d762752f1eab2c378e4593dd49fbecc4d2c1d2bd5a12859271df89815d0168956179e168172b0effb31cb7a326e851d2d77081dedd40a866b93

    • SSDEEP

      384:nOy0MyjKoJpjS9Os5zgBo3EyCKS/Lp8EId+v9hq8YnX+9aNJawcudoD7U:nRydj+Os5CoUyij1lhXYuAnbcuyD7U

    • Adds policy Run key to start application

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks