Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
82a3a6020caa80a0412b2310bb4dbc8e.bin
-
Size
132KB
-
Sample
240201-cygelshdb6
-
MD5
82a3a6020caa80a0412b2310bb4dbc8e
-
SHA1
45432a91c28d7b4a5a513e4e33aeda535a2e386f
-
SHA256
011b83dc87cabe59ca9c35876598cf5453e894d269589c261ddc6ad7660bfee6
-
SHA512
226e31514055b0a80199eaba055df382b0ffb91678db9416cde31da1a9d3a6b8d7c7335c5ec9f2e79af5119ca2bbaa055f2504d92ffee73dd89e6cbcaa752059
-
SSDEEP
3072:VzbrksiVyyY2y1MixVIkm7wjRDrfxryiDgo:VvfyY2WMixVu7wRZyiEo
Static task
static1
Behavioral task
behavioral1
Sample
82a3a6020caa80a0412b2310bb4dbc8e.exe
Resource
win7-20231215-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
82a3a6020caa80a0412b2310bb4dbc8e.bin
-
Size
132KB
-
MD5
82a3a6020caa80a0412b2310bb4dbc8e
-
SHA1
45432a91c28d7b4a5a513e4e33aeda535a2e386f
-
SHA256
011b83dc87cabe59ca9c35876598cf5453e894d269589c261ddc6ad7660bfee6
-
SHA512
226e31514055b0a80199eaba055df382b0ffb91678db9416cde31da1a9d3a6b8d7c7335c5ec9f2e79af5119ca2bbaa055f2504d92ffee73dd89e6cbcaa752059
-
SSDEEP
3072:VzbrksiVyyY2y1MixVIkm7wjRDrfxryiDgo:VvfyY2WMixVu7wRZyiEo
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5