Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6e2eb9481bbca637c22725ab53fd7005ad011c55ce02d804f812da6790a9bede

  • Size

    3.6MB

  • Sample

    240602-3ag94sbh44

  • MD5

    6145e3ebc882746fb2414ccad1ed4ed9

  • SHA1

    20471c3b4120cc056dda6a7a4a1a8a2c4209d2d0

  • SHA256

    6e2eb9481bbca637c22725ab53fd7005ad011c55ce02d804f812da6790a9bede

  • SHA512

    5ddf6d066d2ca1e8a2134f04ecf2a987f07344dab615d66713b3cb9dee0fad8f0f27cc4fad2e71deace1615a04ae4b3126a8cafca5aed5430742101debea1151

  • SSDEEP

    98304:JdByXcdnlLwOrI5Vfeg91hZOhkRpsinjx:Jdien+OrFuBR6cx

Score
10/10

Malware Config

Targets

    • Target

      6e2eb9481bbca637c22725ab53fd7005ad011c55ce02d804f812da6790a9bede

    • Size

      3.6MB

    • MD5

      6145e3ebc882746fb2414ccad1ed4ed9

    • SHA1

      20471c3b4120cc056dda6a7a4a1a8a2c4209d2d0

    • SHA256

      6e2eb9481bbca637c22725ab53fd7005ad011c55ce02d804f812da6790a9bede

    • SHA512

      5ddf6d066d2ca1e8a2134f04ecf2a987f07344dab615d66713b3cb9dee0fad8f0f27cc4fad2e71deace1615a04ae4b3126a8cafca5aed5430742101debea1151

    • SSDEEP

      98304:JdByXcdnlLwOrI5Vfeg91hZOhkRpsinjx:Jdien+OrFuBR6cx

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks