Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c0d7a664b120d11300b9f786f3d78550

  • Size

    1.6MB

  • Sample

    240311-rz2t9shd32

  • MD5

    c0d7a664b120d11300b9f786f3d78550

  • SHA1

    7721f1f2f50e310752501fc36f38024cd8f9ccdb

  • SHA256

    b628148ce69e72e3911fecc6214f09ab7eaab36e040080b03e039ffa7294de67

  • SHA512

    01aa25d7c3309945b6b8c4d6d470f9168ccdef021d20a729bed906fce3a69cf44d6f7cfc478bda359ca2805c94d3ea0afaa833244f60a07e91e45ff2dddf1be8

  • SSDEEP

    12288:vu9MsBj7TbVc+MFdK8zWqiTSGIrzguvYDyph:NWXTBcFrK8zWqiS5gQXh

Score
10/10

Malware Config

Targets

    • Target

      c0d7a664b120d11300b9f786f3d78550

    • Size

      1.6MB

    • MD5

      c0d7a664b120d11300b9f786f3d78550

    • SHA1

      7721f1f2f50e310752501fc36f38024cd8f9ccdb

    • SHA256

      b628148ce69e72e3911fecc6214f09ab7eaab36e040080b03e039ffa7294de67

    • SHA512

      01aa25d7c3309945b6b8c4d6d470f9168ccdef021d20a729bed906fce3a69cf44d6f7cfc478bda359ca2805c94d3ea0afaa833244f60a07e91e45ff2dddf1be8

    • SSDEEP

      12288:vu9MsBj7TbVc+MFdK8zWqiTSGIrzguvYDyph:NWXTBcFrK8zWqiS5gQXh

    Score
    10/10
    • Modifies WinLogon for persistence

    • Adds policy Run key to start application

    • Modifies Installed Components in the registry

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks