Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Do not download beaming tool thats a rat.exe

  • Size

    6.0MB

  • Sample

    240529-q6v5magd91

  • MD5

    003376f4e42b17685b481aa1fefdad2f

  • SHA1

    083da7920a306f61267f9c9bfc6fec775f54c1bd

  • SHA256

    49e5e80f7c823694fa86addf84783ec0b4303df3edcf3fbc51bda19bebc38e42

  • SHA512

    3b5c3b1ed81f75a2bb4ddef3c1f7f7e95e824e284f2532ff99848187a6bdf829f4103d9b7df5c3c6e595562f4c1fe3656cf1ede3ce1f85ec65ca407915a8f166

  • SSDEEP

    98304:jrAkEtdFBCKZkamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RtOuAKju4Cyg:jrAzFIKreN/FJMIDJf0gsAGK4RouAKjQ

Malware Config

Targets

    • Target

      Do not download beaming tool thats a rat.exe

    • Size

      6.0MB

    • MD5

      003376f4e42b17685b481aa1fefdad2f

    • SHA1

      083da7920a306f61267f9c9bfc6fec775f54c1bd

    • SHA256

      49e5e80f7c823694fa86addf84783ec0b4303df3edcf3fbc51bda19bebc38e42

    • SHA512

      3b5c3b1ed81f75a2bb4ddef3c1f7f7e95e824e284f2532ff99848187a6bdf829f4103d9b7df5c3c6e595562f4c1fe3656cf1ede3ce1f85ec65ca407915a8f166

    • SSDEEP

      98304:jrAkEtdFBCKZkamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RtOuAKju4Cyg:jrAzFIKreN/FJMIDJf0gsAGK4RouAKjQ

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks