Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    643201ca1a12ab1b96b3ad5ed440f3cb

  • Size

    76KB

  • Sample

    240118-chk3vsbch2

  • MD5

    643201ca1a12ab1b96b3ad5ed440f3cb

  • SHA1

    01063eed5ba44818f19dd4dcd2422537a1d4c25c

  • SHA256

    7ed6a448d0dfb0257f4edb80393d25c771302157280d5895ed5df7b7584709ae

  • SHA512

    da77979b53245a47286133a3adb1d5ecbdcb4364e612411de9847660adbb6319f172d9a97f4ac309637c22cc480211f3b6928669eb31146221671c7c32cae59e

  • SSDEEP

    768:AItfy70OJGRJxwLoImIvKRx+MhvxUImcYaq1cwganRMTQYsl0uJGLJxsLoI:ZI0OJ3PKyMXucYDcGRMTlsl0uJJ

Score
8/10

Malware Config

Targets

    • Target

      643201ca1a12ab1b96b3ad5ed440f3cb

    • Size

      76KB

    • MD5

      643201ca1a12ab1b96b3ad5ed440f3cb

    • SHA1

      01063eed5ba44818f19dd4dcd2422537a1d4c25c

    • SHA256

      7ed6a448d0dfb0257f4edb80393d25c771302157280d5895ed5df7b7584709ae

    • SHA512

      da77979b53245a47286133a3adb1d5ecbdcb4364e612411de9847660adbb6319f172d9a97f4ac309637c22cc480211f3b6928669eb31146221671c7c32cae59e

    • SSDEEP

      768:AItfy70OJGRJxwLoImIvKRx+MhvxUImcYaq1cwganRMTQYsl0uJGLJxsLoI:ZI0OJ3PKyMXucYDcGRMTlsl0uJJ

    Score
    8/10
    • Adds policy Run key to start application

    • Modifies Installed Components in the registry

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks