Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    391da1dc7cd8ccd8438d258fb58eadeb

  • Size

    439KB

  • Sample

    240410-gp3zgaeh76

  • MD5

    391da1dc7cd8ccd8438d258fb58eadeb

  • SHA1

    16e51750473c116bfa3f1e7f0e345a0d3aae5720

  • SHA256

    02a1abbf1dca88e417498d9c2bd86ef3ead5a71bcee676356e7731371ef73338

  • SHA512

    47d265bf41adca8feb173a43c49bc5bda1c72c277bce2d52f10b7dcaf61f70baf0e22fb613ed4367fa5eca033be992e17a0e1ffff57ae6e81ba85088c4fe2cad

  • SSDEEP

    6144:HrnkP+6bB0H9rj3fMobS1bSKPbSX2heDObS08bSAheDpbSk7HV/B+ybS0ya2heDD:HQ+Qu9piLzwoJZeDuD7ZlyVl5Zk7hck

Malware Config

Targets

    • Target

      391da1dc7cd8ccd8438d258fb58eadeb

    • Size

      439KB

    • MD5

      391da1dc7cd8ccd8438d258fb58eadeb

    • SHA1

      16e51750473c116bfa3f1e7f0e345a0d3aae5720

    • SHA256

      02a1abbf1dca88e417498d9c2bd86ef3ead5a71bcee676356e7731371ef73338

    • SHA512

      47d265bf41adca8feb173a43c49bc5bda1c72c277bce2d52f10b7dcaf61f70baf0e22fb613ed4367fa5eca033be992e17a0e1ffff57ae6e81ba85088c4fe2cad

    • SSDEEP

      6144:HrnkP+6bB0H9rj3fMobS1bSKPbSX2heDObS08bSAheDpbSk7HV/B+ybS0ya2heDD:HQ+Qu9piLzwoJZeDuD7ZlyVl5Zk7hck

    • Modifies WinLogon for persistence

    • Drops file in Drivers directory

    • Sets service image path in registry

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks