Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0304b3c796055d7e5485bf68c3a7a8606385826a04e5340d64413c8a413658ff

  • Size

    303KB

  • Sample

    240309-w2yb3seg49

  • MD5

    1e82bb8e71453ef778c46e26e7afc85b

  • SHA1

    438dcfe8abe89838fe4c40c3b3296e1a9a317964

  • SHA256

    0304b3c796055d7e5485bf68c3a7a8606385826a04e5340d64413c8a413658ff

  • SHA512

    07101aa4d547d6c02823ee35169525e1231d31898c1523305dbe5a7cec058c4225a2cdf12eaf9f8e3e8b5aeea157c9fcd66f6d507004f3aad17b79c5e7ef10d0

  • SSDEEP

    6144:Irko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABy:IrkAu6/eIo4R/P1EioKMbmGvgZ2lAB/q

Score
9/10

Malware Config

Targets

    • Target

      0304b3c796055d7e5485bf68c3a7a8606385826a04e5340d64413c8a413658ff

    • Size

      303KB

    • MD5

      1e82bb8e71453ef778c46e26e7afc85b

    • SHA1

      438dcfe8abe89838fe4c40c3b3296e1a9a317964

    • SHA256

      0304b3c796055d7e5485bf68c3a7a8606385826a04e5340d64413c8a413658ff

    • SHA512

      07101aa4d547d6c02823ee35169525e1231d31898c1523305dbe5a7cec058c4225a2cdf12eaf9f8e3e8b5aeea157c9fcd66f6d507004f3aad17b79c5e7ef10d0

    • SSDEEP

      6144:Irko9uEo2S1YnQmCX492DkwNP3qpYF2JA06CzL31tE5ioKpbgLoMmGvgk052lABy:IrkAu6/eIo4R/P1EioKMbmGvgZ2lAB/q

    Score
    9/10
    • Detects executables referencing many IR and analysis tools

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks