Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/08/2024, 15:01

240806-sd4bmswcja 7

06/08/2024, 14:24

240806-rq56bsvfpa 1

06/08/2024, 13:16

240806-qhrsaszfjn 7

General

  • Target

    3061702.bin

  • Size

    80KB

  • Sample

    240806-qhrsaszfjn

  • MD5

    a975959cae20e53102a5e6202692b533

  • SHA1

    9665799c84f0eff052a57c3205b1a515adc39278

  • SHA256

    c0dee466b4592979a08e2d9176d3e1515a631268db2c5887faa8474aefeece5b

  • SHA512

    f06c339ee01792d6cbab0c37038a70e69150b9b009aaafeb3244f3cb9b8f2f13f1b1ea3aebceecef6b395ffd133f1d25a51d648569598716332a14c91a35c574

  • SSDEEP

    1536:RWsfKVotw2uYh6g+FB3SYFjgaiZBflluFl1bSzLm9xX/X/LA7MpzX:RWsfKVotw2uYYg+FB37FBc981bSzLmPR

Score
7/10

Malware Config

Targets

    • Target

      3061702.bin

    • Size

      80KB

    • MD5

      a975959cae20e53102a5e6202692b533

    • SHA1

      9665799c84f0eff052a57c3205b1a515adc39278

    • SHA256

      c0dee466b4592979a08e2d9176d3e1515a631268db2c5887faa8474aefeece5b

    • SHA512

      f06c339ee01792d6cbab0c37038a70e69150b9b009aaafeb3244f3cb9b8f2f13f1b1ea3aebceecef6b395ffd133f1d25a51d648569598716332a14c91a35c574

    • SSDEEP

      1536:RWsfKVotw2uYh6g+FB3SYFjgaiZBflluFl1bSzLm9xX/X/LA7MpzX:RWsfKVotw2uYYg+FB37FBc981bSzLmPR

    Score
    7/10
    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks