Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    71bab121a732623076aef7bb44a8486bbb40338d95ab2486f3030642d1e1c0c7

  • Size

    51KB

  • Sample

    240517-aasfvsff4v

  • MD5

    5b708795ed40c6821f5f0d527a647ab6

  • SHA1

    aa68afdf3beecf9db8b2ffbdb1c3e705f183e5df

  • SHA256

    71bab121a732623076aef7bb44a8486bbb40338d95ab2486f3030642d1e1c0c7

  • SHA512

    1a0a70e3b7e2d7fa0fb49a9a2e61f69967c42c6b7011d6d7b348ac1b97d3ae94fb46137690a28caf9b5232b315a2d11bd9ae2e2aec6d362d9fc24c18165f90b3

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS37:nNJb/HkwoLe29UjQ4wqQOLIMVnS37

Score
10/10

Malware Config

Targets

    • Target

      71bab121a732623076aef7bb44a8486bbb40338d95ab2486f3030642d1e1c0c7

    • Size

      51KB

    • MD5

      5b708795ed40c6821f5f0d527a647ab6

    • SHA1

      aa68afdf3beecf9db8b2ffbdb1c3e705f183e5df

    • SHA256

      71bab121a732623076aef7bb44a8486bbb40338d95ab2486f3030642d1e1c0c7

    • SHA512

      1a0a70e3b7e2d7fa0fb49a9a2e61f69967c42c6b7011d6d7b348ac1b97d3ae94fb46137690a28caf9b5232b315a2d11bd9ae2e2aec6d362d9fc24c18165f90b3

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS37:nNJb/HkwoLe29UjQ4wqQOLIMVnS37

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks