Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Optimizer-16.4.exe
-
Size
2.3MB
-
Sample
240214-tjsmrsga56
-
MD5
9352623ba2fee1206079ce3d81bf0132
-
SHA1
9c398c2d975d82ba1e46f3bcc0e6298a2b713b8d
-
SHA256
f4775567ca9941b4fb3224d97b0741ae669eedfcb0d8b3c71106b21bdb1aee28
-
SHA512
a38cef70819524a3ba8d7583b763da3fac71a9b67e832165f14f60568f7a2a07f67418bb7f7a544b32aa3d76a4fa9a6b142a3998cf362a116171ed4fae05187e
-
SSDEEP
24576:QqsJmQYTZZ4GKTnbv7DO9JvvEC8ZJC3Bjk38WuBcAbwoA/BkjSHXP36RMG:QMH4VTnbv7uEC8Zw3CSA/Bkj0
Static task
static1
Behavioral task
behavioral1
Sample
Optimizer-16.4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Optimizer-16.4.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
Optimizer-16.4.exe
-
Size
2.3MB
-
MD5
9352623ba2fee1206079ce3d81bf0132
-
SHA1
9c398c2d975d82ba1e46f3bcc0e6298a2b713b8d
-
SHA256
f4775567ca9941b4fb3224d97b0741ae669eedfcb0d8b3c71106b21bdb1aee28
-
SHA512
a38cef70819524a3ba8d7583b763da3fac71a9b67e832165f14f60568f7a2a07f67418bb7f7a544b32aa3d76a4fa9a6b142a3998cf362a116171ed4fae05187e
-
SSDEEP
24576:QqsJmQYTZZ4GKTnbv7DO9JvvEC8ZJC3Bjk38WuBcAbwoA/BkjSHXP36RMG:QMH4VTnbv7uEC8Zw3CSA/Bkj0
Score10/10-
Modifies visibility of file extensions in Explorer
-
Disables use of System Restore points
-
Sets file execution options in registry
-
Stops running service(s)
-
Modifies file permissions
-
Legitimate hosting services abused for malware hosting/C2
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Defense Evasion
File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1Impair Defenses
3Disable or Modify Tools
2Indicator Removal
2File Deletion
2Modify Registry
7Subvert Trust Controls
1Install Root Certificate
1