Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7714d31c57edc5cac50f4a089f4006f39a10ee1eb5cdceb37da21be2d7991102

  • Size

    51KB

  • Sample

    240603-23se4sdc38

  • MD5

    a0ab857ead3ceaa24fd8ee6c9d06eca2

  • SHA1

    9555c6cdbd2de7f6cc8d91dcb4feb0931980bc38

  • SHA256

    7714d31c57edc5cac50f4a089f4006f39a10ee1eb5cdceb37da21be2d7991102

  • SHA512

    e42ad3cab9a94cac1713f5892dcae2b626c3e74f3b489f09d3f1a0cd78fdfcb404e952d94bd5599889843704cf1149505a48fdc5c6e64e55b27df2a932dcce62

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3S:nNJb/HkwoLe29UjQ4wqQOLIMVnS3S

Score
10/10

Malware Config

Targets

    • Target

      7714d31c57edc5cac50f4a089f4006f39a10ee1eb5cdceb37da21be2d7991102

    • Size

      51KB

    • MD5

      a0ab857ead3ceaa24fd8ee6c9d06eca2

    • SHA1

      9555c6cdbd2de7f6cc8d91dcb4feb0931980bc38

    • SHA256

      7714d31c57edc5cac50f4a089f4006f39a10ee1eb5cdceb37da21be2d7991102

    • SHA512

      e42ad3cab9a94cac1713f5892dcae2b626c3e74f3b489f09d3f1a0cd78fdfcb404e952d94bd5599889843704cf1149505a48fdc5c6e64e55b27df2a932dcce62

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3S:nNJb/HkwoLe29UjQ4wqQOLIMVnS3S

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks