Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace
-
Size
41KB
-
Sample
240515-ynzn4ahb3z
-
MD5
5d49fa9d675133d08a326a745c8f647d
-
SHA1
123948c5f2ff8a58921172afa38d4f066d47d0f6
-
SHA256
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace
-
SHA512
811e4fea86bdef1ed82cab282956cb124f03a429540544f88fdb789f306a9b306031d2d92238c53f0f9ec6c09378cab04dced99142a4beade6a96f618b3c892b
-
SSDEEP
768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdb:+WNBGBrM6Fv6mkqyoe
Static task
static1
Behavioral task
behavioral1
Sample
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace
-
Size
41KB
-
MD5
5d49fa9d675133d08a326a745c8f647d
-
SHA1
123948c5f2ff8a58921172afa38d4f066d47d0f6
-
SHA256
200973eab56e69a6d40c6325732241c7e1f8c0f2ef6441ea93a93374713a3ace
-
SHA512
811e4fea86bdef1ed82cab282956cb124f03a429540544f88fdb789f306a9b306031d2d92238c53f0f9ec6c09378cab04dced99142a4beade6a96f618b3c892b
-
SSDEEP
768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdb:+WNBGBrM6Fv6mkqyoe
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1