Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    95d6c2b996bd088f28f8928187dfc835

  • Size

    244KB

  • Sample

    240212-bea8taea8z

  • MD5

    95d6c2b996bd088f28f8928187dfc835

  • SHA1

    bc0cb69e9cc893fa862dbf981f271c71b1b72341

  • SHA256

    bcfb48a0abb04179fa6bee4af69707d4dcc7dc2748214cf5f9a12c76eca6d2a3

  • SHA512

    f8d95ebb83ef4f94868d9983a255b04c448fb529dc9d2f29c414b7718575aab75be2f3122e5f5a06266d2549947d043e2fde2216914cdcfc44cc6ae7d073864b

  • SSDEEP

    6144:gLCdTnGMN0wQY+NCb8NlLClQX8vE6Hs9dPd7s8Gmc:VRm7C8vLX8v+fd7sXV

Malware Config

Targets

    • Target

      95d6c2b996bd088f28f8928187dfc835

    • Size

      244KB

    • MD5

      95d6c2b996bd088f28f8928187dfc835

    • SHA1

      bc0cb69e9cc893fa862dbf981f271c71b1b72341

    • SHA256

      bcfb48a0abb04179fa6bee4af69707d4dcc7dc2748214cf5f9a12c76eca6d2a3

    • SHA512

      f8d95ebb83ef4f94868d9983a255b04c448fb529dc9d2f29c414b7718575aab75be2f3122e5f5a06266d2549947d043e2fde2216914cdcfc44cc6ae7d073864b

    • SSDEEP

      6144:gLCdTnGMN0wQY+NCb8NlLClQX8vE6Hs9dPd7s8Gmc:VRm7C8vLX8v+fd7sXV

    • Sets DLL path for service in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks