Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6ed170485ca598ccc31781416a315710N.exe

  • Size

    143KB

  • Sample

    240805-kjfhrs1erp

  • MD5

    6ed170485ca598ccc31781416a315710

  • SHA1

    30a23edde75f13b2ed791631ff52d6e2d2bdcf5a

  • SHA256

    6728579691845cd78ae57de1680e291fc58a46d88cfc40563755b92562b154b3

  • SHA512

    aa06fe153905a90784b1bf07c1eb19bf0f9360bbeaa19309b81a663769dedeff83590a93bd6003520d90d9fe8cb61e07d92712e7a4f37b62a3716e5188ce510c

  • SSDEEP

    3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIe:ZopGGgbiwU8JC

Malware Config

Targets

    • Target

      6ed170485ca598ccc31781416a315710N.exe

    • Size

      143KB

    • MD5

      6ed170485ca598ccc31781416a315710

    • SHA1

      30a23edde75f13b2ed791631ff52d6e2d2bdcf5a

    • SHA256

      6728579691845cd78ae57de1680e291fc58a46d88cfc40563755b92562b154b3

    • SHA512

      aa06fe153905a90784b1bf07c1eb19bf0f9360bbeaa19309b81a663769dedeff83590a93bd6003520d90d9fe8cb61e07d92712e7a4f37b62a3716e5188ce510c

    • SSDEEP

      3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIe:ZopGGgbiwU8JC

    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks