Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    aa1cbbafc41735fe8e794a6e5d8e5410

  • Size

    264KB

  • Sample

    240227-zhwwpaba93

  • MD5

    aa1cbbafc41735fe8e794a6e5d8e5410

  • SHA1

    439c128008abf32242c4290bba1232f20127d1f4

  • SHA256

    e16ac3f14e8b78ef1f56643f0ecaa9310659d498e1a2712575763bf09c0c3376

  • SHA512

    b35b7bd7433ac3d9d8299c5462f20f11bfc4e0303e17d189c089015cff9d57a38711703911662037452cf8d2a73db86b7b18aae3e5d265d84463c32a07d576e9

  • SSDEEP

    6144:MQL46sq9C9X3xVHG8EnSEpawFWAf23j9Wpxhq:F5s1xVHG8ESkDcAfcjKxM

Malware Config

Targets

    • Target

      aa1cbbafc41735fe8e794a6e5d8e5410

    • Size

      264KB

    • MD5

      aa1cbbafc41735fe8e794a6e5d8e5410

    • SHA1

      439c128008abf32242c4290bba1232f20127d1f4

    • SHA256

      e16ac3f14e8b78ef1f56643f0ecaa9310659d498e1a2712575763bf09c0c3376

    • SHA512

      b35b7bd7433ac3d9d8299c5462f20f11bfc4e0303e17d189c089015cff9d57a38711703911662037452cf8d2a73db86b7b18aae3e5d265d84463c32a07d576e9

    • SSDEEP

      6144:MQL46sq9C9X3xVHG8EnSEpawFWAf23j9Wpxhq:F5s1xVHG8ESkDcAfcjKxM

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks