Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e5ae5b7d484fb575e7816a9bcff64f2fc1a4477c1a804c38a7ed80dddfc9479b

  • Size

    51KB

  • Sample

    240529-d3acjagh6y

  • MD5

    3324e5e317b325ca56500883c15fcd91

  • SHA1

    27ac71d6df2c7b19765842c9e4361f966cf3aaaa

  • SHA256

    e5ae5b7d484fb575e7816a9bcff64f2fc1a4477c1a804c38a7ed80dddfc9479b

  • SHA512

    d0d84d08d5fc9ff6db020dd78ddc3520734b18ccff9c41484e1e5f8ebb333395bad35e9d8476fdea343889334e35e5a9e07881a779e8b3b61636b5c4f34cf179

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3l:nNJb/HkwoLe29UjQ4wqQOLIMVnS3l

Score
10/10

Malware Config

Targets

    • Target

      e5ae5b7d484fb575e7816a9bcff64f2fc1a4477c1a804c38a7ed80dddfc9479b

    • Size

      51KB

    • MD5

      3324e5e317b325ca56500883c15fcd91

    • SHA1

      27ac71d6df2c7b19765842c9e4361f966cf3aaaa

    • SHA256

      e5ae5b7d484fb575e7816a9bcff64f2fc1a4477c1a804c38a7ed80dddfc9479b

    • SHA512

      d0d84d08d5fc9ff6db020dd78ddc3520734b18ccff9c41484e1e5f8ebb333395bad35e9d8476fdea343889334e35e5a9e07881a779e8b3b61636b5c4f34cf179

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3l:nNJb/HkwoLe29UjQ4wqQOLIMVnS3l

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks