Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Wakamarina Valley, NZ.zip

  • Size

    820.0MB

  • Sample

    240223-e8jc3aba3w

  • MD5

    80650a32f3affa8add6aacca783888e3

  • SHA1

    3cc8a9741d561ac181136d4af47961985605107d

  • SHA256

    da7a47b48ce813ad1cedfea4533d1cb1e2c06e8c407dfa952f15d363e72f96ce

  • SHA512

    fb71507ea428e79bced6e4ce31d2cfd45fb64c2ea59528ebd51024343fb787b60656798be2ab2e055dc3359718c26d92d8c2a68e9a36c0fb293a5cc7d5a62c44

  • SSDEEP

    25165824:VQZvsYnFsWQcluVKbMjRnhes7VHCDegRDMlZCaSAaw49x92zthTX9:iZvsYnFsWp3ERUsC1aSY492zz5

Malware Config

Targets

    • Target

      Wakamarina Valley, NZ.zip

    • Size

      820.0MB

    • MD5

      80650a32f3affa8add6aacca783888e3

    • SHA1

      3cc8a9741d561ac181136d4af47961985605107d

    • SHA256

      da7a47b48ce813ad1cedfea4533d1cb1e2c06e8c407dfa952f15d363e72f96ce

    • SHA512

      fb71507ea428e79bced6e4ce31d2cfd45fb64c2ea59528ebd51024343fb787b60656798be2ab2e055dc3359718c26d92d8c2a68e9a36c0fb293a5cc7d5a62c44

    • SSDEEP

      25165824:VQZvsYnFsWQcluVKbMjRnhes7VHCDegRDMlZCaSAaw49x92zthTX9:iZvsYnFsWp3ERUsC1aSY492zz5

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks