Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/05/2024, 19:43

240507-yfk6qsfa24 7

07/05/2024, 19:40

240507-ydxfzscc3v 8

07/05/2024, 19:35

240507-ya661sef79 7

07/05/2024, 19:31

240507-x8wmhaee52 7

07/05/2024, 19:26

240507-x5whbsbf8y 8

07/05/2024, 19:21

240507-x22j6seb32 6

07/05/2024, 19:16

240507-xyvbpadh24 6

07/05/2024, 19:14

240507-xxmv8adg38 10

General

  • Target

    https://pastebin.com/gU4Zj4SD

  • Sample

    240507-ydxfzscc3v

Malware Config

Targets

    • Target

      https://pastebin.com/gU4Zj4SD

    • Disables Task Manager via registry modification

    • Possible privilege escalation attempt

    • Executes dropped EXE

    • Modifies file permissions

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Modifies boot configuration data using bcdedit

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks