Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Seven.zip

  • Size

    1.4MB

  • Sample

    240424-zsl48shf22

  • MD5

    ee22c1d29dd34627c4bfc226f42ef30e

  • SHA1

    2b9578690a064934536c5bdb7b76444ddc4eb97f

  • SHA256

    8280d233a0d35bf459bf50a0d4eb2279296a393669ed5975df6653333f91c035

  • SHA512

    0d820363a102f6ab395a7b9a538295e50ef3b06b3ab28400803a4a4a2b575464742ef71d660d93304c4db0118e0125234c0fb9fd489faf5e028dc253a9a838a4

  • SSDEEP

    24576:AhFqKQqXCCkDBWniRIqjXhTscNzq9wMf6xGoab9jbCsFhMbzSs1sdj:AhZRXCC7gIq9RNwnEGoaRPZ7D

Score
8/10

Malware Config

Targets

    • Target

      Seven.dll

    • Size

      1.3MB

    • MD5

      25613af0d3a3d91c25d0bf820e8a88da

    • SHA1

      c1419c4e3a6a5280bf76d0924193a3c49aafbcb5

    • SHA256

      ae3b4e6be63f04c41d79c612fe86ec17181f111964bdbe0927cc110191a65e0e

    • SHA512

      858637a81a772ad26a6c47b3f20d75095b8057fefa4b17277d60b7e717223a9a83ffd73dab19ae493f8023b7b202f4d08dc352c56ba7adb2e6c5771e638bb9ea

    • SSDEEP

      24576:wWwA3QdwQ6hYcM3GVitoqjVhliuNXq98Mf8lG2WdPPfCcVjMVjm6dO:ws3G9oB0oqtXNUrkG2W9n7N

    Score
    1/10
    • Target

      Seven.exe

    • Size

      139KB

    • MD5

      350273e0d2e8a9ba5e37b791016112a0

    • SHA1

      5bfb616dd46f67d1dcbbff55ca5917ffc1ec8b71

    • SHA256

      27297bf8139bea755e9297e7e1489d827d1ee09a8e1d94a3ef96a2edb2de61ba

    • SHA512

      b1e768524b4e840bd5f4163205122dd1725583245d8bfd5cbd89eb21a5fb9d33aff1b7b0ca42132b7dae469e025068ae663b3b02ad59927a558dc340141ec91b

    • SSDEEP

      3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8ltw:miS4ompB9S3BZi0a1G78IVhcTct

    Score
    8/10
    • Modifies Windows Firewall

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.