Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a592ed7e9f64453f46384487bd4e8d67.exe

  • Size

    44KB

  • Sample

    240501-rkt6wagf6x

  • MD5

    a592ed7e9f64453f46384487bd4e8d67

  • SHA1

    c723cb147090bb36e4a794414a48af708ab1fb62

  • SHA256

    c4535fb1cdaf411ffce719e2edc58b705ad0eb088506e21a861669e2941a4f0d

  • SHA512

    ad11d7778bfad0c2447f8b0868b6be9d004332bd4e0b272e6d4bdf87e147fd16acc5cd75a54e043eb17362b19eb3276c366cde7ed87d037b8924da102836613c

  • SSDEEP

    768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQv/+64:RUNHFKQbIkHvGkAu+F

Malware Config

Targets

    • Target

      a592ed7e9f64453f46384487bd4e8d67.exe

    • Size

      44KB

    • MD5

      a592ed7e9f64453f46384487bd4e8d67

    • SHA1

      c723cb147090bb36e4a794414a48af708ab1fb62

    • SHA256

      c4535fb1cdaf411ffce719e2edc58b705ad0eb088506e21a861669e2941a4f0d

    • SHA512

      ad11d7778bfad0c2447f8b0868b6be9d004332bd4e0b272e6d4bdf87e147fd16acc5cd75a54e043eb17362b19eb3276c366cde7ed87d037b8924da102836613c

    • SSDEEP

      768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQv/+64:RUNHFKQbIkHvGkAu+F

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks