Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    92a3b380c918e7e904a0ccb099497200e65dbf3870291be239684db3f7653e7c

  • Size

    5.7MB

  • Sample

    240425-azl1dacc9w

  • MD5

    c663205fd55310fb210f9115f6d9aae5

  • SHA1

    2620358f323d97232b1ab9e492b5719c52f9134b

  • SHA256

    92a3b380c918e7e904a0ccb099497200e65dbf3870291be239684db3f7653e7c

  • SHA512

    cc7c4633742ddbbdaffad87558501310baed41f6fd6ad1130fb8118ac692e171a94434184518f9fe1c6e029325ca10aa9a053e23097e27f466a3c9a57a57b0f5

  • SSDEEP

    98304:D4Ajz7ydfMhjI6NfgXtAP44R8qLf3gbz2FSmaI7dl0uy:kY3yGjISNQbz2FSmaI7dlO

Score
10/10

Malware Config

Targets

    • Target

      92a3b380c918e7e904a0ccb099497200e65dbf3870291be239684db3f7653e7c

    • Size

      5.7MB

    • MD5

      c663205fd55310fb210f9115f6d9aae5

    • SHA1

      2620358f323d97232b1ab9e492b5719c52f9134b

    • SHA256

      92a3b380c918e7e904a0ccb099497200e65dbf3870291be239684db3f7653e7c

    • SHA512

      cc7c4633742ddbbdaffad87558501310baed41f6fd6ad1130fb8118ac692e171a94434184518f9fe1c6e029325ca10aa9a053e23097e27f466a3c9a57a57b0f5

    • SSDEEP

      98304:D4Ajz7ydfMhjI6NfgXtAP44R8qLf3gbz2FSmaI7dl0uy:kY3yGjISNQbz2FSmaI7dlO

    Score
    9/10
    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks