Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92

  • Size

    5.5MB

  • Sample

    240707-ggprwaverk

  • MD5

    51822f63aedbaf61c516427df51378ad

  • SHA1

    c3b226e5d1f3df3ef6a925304cc90b96de5d024d

  • SHA256

    d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92

  • SHA512

    1d41d181454143593e555db6e23f001944489741b2935f362a517cdea3e7d20c9c9238538474be172d00222d3789107721d7c67c08f1b5dc29dcf3752c66d8bf

  • SSDEEP

    98304:Ci45Z5Wbf3/qb3yr/IMh5OZ/gLsRIqJ4IQsbaNJ2n0kvRlSTZ8qyFONASHiQxN:A5Z5Wb3a3yA8M4OH4IQrJ2n7/MNASCQH

Malware Config

Targets

    • Target

      d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92

    • Size

      5.5MB

    • MD5

      51822f63aedbaf61c516427df51378ad

    • SHA1

      c3b226e5d1f3df3ef6a925304cc90b96de5d024d

    • SHA256

      d239cd46b0931830bd18f733ec04b3839d643612aa6d4b7da8d0733c60e36a92

    • SHA512

      1d41d181454143593e555db6e23f001944489741b2935f362a517cdea3e7d20c9c9238538474be172d00222d3789107721d7c67c08f1b5dc29dcf3752c66d8bf

    • SSDEEP

      98304:Ci45Z5Wbf3/qb3yr/IMh5OZ/gLsRIqJ4IQsbaNJ2n0kvRlSTZ8qyFONASHiQxN:A5Z5Wb3a3yA8M4OH4IQrJ2n7/MNASCQH

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks