Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
98945dcbfb967d06c0cb3d47cd25dac0N.exe
-
Size
120KB
-
Sample
240722-l4deks1fpe
-
MD5
98945dcbfb967d06c0cb3d47cd25dac0
-
SHA1
ba6a2e6c89b2788a80ffae2683ac08143b1b447a
-
SHA256
04fe527b33e238b7a4e7887cc70586ee799614a2d236290452c03af03147467d
-
SHA512
cebefe198556a1a913d6f89bb1e5a749613eddc7330311308899d0a9dc3eac28660fc373581e9970e174531b7e9fadc519aeb7bfd656872a42277846dca83d3d
-
SSDEEP
3072:ifnjDu+nx6cLkh0xOXCpH7lVQ/qvObL35qC0inYfjV7:SuqLkhEOXgH7l6/BbL3oinEj
Static task
static1
Behavioral task
behavioral1
Sample
98945dcbfb967d06c0cb3d47cd25dac0N.dll
Resource
win7-20240704-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
98945dcbfb967d06c0cb3d47cd25dac0N.exe
-
Size
120KB
-
MD5
98945dcbfb967d06c0cb3d47cd25dac0
-
SHA1
ba6a2e6c89b2788a80ffae2683ac08143b1b447a
-
SHA256
04fe527b33e238b7a4e7887cc70586ee799614a2d236290452c03af03147467d
-
SHA512
cebefe198556a1a913d6f89bb1e5a749613eddc7330311308899d0a9dc3eac28660fc373581e9970e174531b7e9fadc519aeb7bfd656872a42277846dca83d3d
-
SSDEEP
3072:ifnjDu+nx6cLkh0xOXCpH7lVQ/qvObL35qC0inYfjV7:SuqLkhEOXgH7l6/BbL3oinEj
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5