Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    nades.py

  • Size

    5KB

  • Sample

    240516-hplkvsgh3w

  • MD5

    443578df89dacb5da5452eae6a7762d2

  • SHA1

    4722c25b48e57c2e47496144c0fb9ae859f14b8b

  • SHA256

    4fb64071ceca9a617c6726bf10992e032e3bba2f177aaf04959e86ddf8119294

  • SHA512

    57635320e81e5fb86c111887f5f85005662fff3ac7bb841c8dffa8f7af5bd8f41ff926b4347d8b2f181951dcd546e99352e3c7d1ba785d835fb3fa023ec09422

  • SSDEEP

    96:Aix+px+zE//x+YpfFEB25npeiede9eyeae3eDeweyengJefVdcYA6fE1Rpr1CxgB:ASELzfFP81Y4l9OyXlGKFsxIxg2WdTM2

Malware Config

Targets

    • Target

      nades.py

    • Size

      5KB

    • MD5

      443578df89dacb5da5452eae6a7762d2

    • SHA1

      4722c25b48e57c2e47496144c0fb9ae859f14b8b

    • SHA256

      4fb64071ceca9a617c6726bf10992e032e3bba2f177aaf04959e86ddf8119294

    • SHA512

      57635320e81e5fb86c111887f5f85005662fff3ac7bb841c8dffa8f7af5bd8f41ff926b4347d8b2f181951dcd546e99352e3c7d1ba785d835fb3fa023ec09422

    • SSDEEP

      96:Aix+px+zE//x+YpfFEB25npeiede9eyeae3eDeweyengJefVdcYA6fE1Rpr1CxgB:ASELzfFP81Y4l9OyXlGKFsxIxg2WdTM2

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks