Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    61e730e19c1cf4af94635fd0d40d25927e94f05e25e594f12ce26f9ad4dcadd3

  • Size

    112KB

  • Sample

    240802-2bwcpaxfnh

  • MD5

    e2e126f573804bb358efd5a014e7f03d

  • SHA1

    7c7f3bec6bfd1920e5c609c2ee1b8b9016faa2ab

  • SHA256

    61e730e19c1cf4af94635fd0d40d25927e94f05e25e594f12ce26f9ad4dcadd3

  • SHA512

    4c3ca584aca4c93425638c6d8d8d0e94fbd4ea6ccb4bb049a897c66745e97bab01cbed829a713e1453bae3ecb95465642d22f12e0baba15da12ea75e515f3557

  • SSDEEP

    1536:OxneYg04Qu8ZibpCy4Za6vXnJMOr1DaYfMZRWuLsV+19/IP:OZTgQdozGvXeggYfc0DV+1BIP

Malware Config

Targets

    • Target

      61e730e19c1cf4af94635fd0d40d25927e94f05e25e594f12ce26f9ad4dcadd3

    • Size

      112KB

    • MD5

      e2e126f573804bb358efd5a014e7f03d

    • SHA1

      7c7f3bec6bfd1920e5c609c2ee1b8b9016faa2ab

    • SHA256

      61e730e19c1cf4af94635fd0d40d25927e94f05e25e594f12ce26f9ad4dcadd3

    • SHA512

      4c3ca584aca4c93425638c6d8d8d0e94fbd4ea6ccb4bb049a897c66745e97bab01cbed829a713e1453bae3ecb95465642d22f12e0baba15da12ea75e515f3557

    • SSDEEP

      1536:OxneYg04Qu8ZibpCy4Za6vXnJMOr1DaYfMZRWuLsV+19/IP:OZTgQdozGvXeggYfc0DV+1BIP

    • Adds autorun key to be loaded by Explorer.exe on startup

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks