Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3b8241c9376ecb75f70265355ea77936570e5f014b20174bd15faa1a5584d3d7
-
Size
140KB
-
Sample
240308-xfmtwsea33
-
MD5
0fcfd8864755e558b388a7c7a27d1f44
-
SHA1
315a74641f1b0b4ca4ce264f36d06b088f7db0b6
-
SHA256
3b8241c9376ecb75f70265355ea77936570e5f014b20174bd15faa1a5584d3d7
-
SHA512
1b0f6e9783d2f76c537dfda7e51ddb3e127101c77a0fa2fa3eec03f960ac31b75fdc4815712010a99ac011fa8ea3d601fe0e38d11df30f249a87fc614c330239
-
SSDEEP
3072:XWtwXwIHRj1EBr4XQS78J+9JHAtVcVrqnM+p09qct4hh4nHq:fgQxqfA8JyJyVcVrqvctm8K
Static task
static1
Behavioral task
behavioral1
Sample
3b8241c9376ecb75f70265355ea77936570e5f014b20174bd15faa1a5584d3d7.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
3b8241c9376ecb75f70265355ea77936570e5f014b20174bd15faa1a5584d3d7
-
Size
140KB
-
MD5
0fcfd8864755e558b388a7c7a27d1f44
-
SHA1
315a74641f1b0b4ca4ce264f36d06b088f7db0b6
-
SHA256
3b8241c9376ecb75f70265355ea77936570e5f014b20174bd15faa1a5584d3d7
-
SHA512
1b0f6e9783d2f76c537dfda7e51ddb3e127101c77a0fa2fa3eec03f960ac31b75fdc4815712010a99ac011fa8ea3d601fe0e38d11df30f249a87fc614c330239
-
SSDEEP
3072:XWtwXwIHRj1EBr4XQS78J+9JHAtVcVrqnM+p09qct4hh4nHq:fgQxqfA8JyJyVcVrqvctm8K
-
UPX dump on OEP (original entry point)
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1