Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
821a63c55ae283f530eebdec1d05e080N.exe
-
Size
92KB
-
Sample
240814-fm6rxasajr
-
MD5
821a63c55ae283f530eebdec1d05e080
-
SHA1
9cc5342b11b4bea4cf1f17e005ee6bc188d6bca2
-
SHA256
f1ec842389825506025a0b0840c144a685c6dbf5ca17ce5981bbe4901731507f
-
SHA512
a1c8bce69280c2b0021ed9b28b458141fe60f7a7718107322bc9ea4f2ef6b783cd1936817df86195c8a5d999572f199bc17983b7eadcbcdc72ed4cfce57a25f7
-
SSDEEP
1536:0vcLvfWIqsDGSZp76jscHqOIYXUYsJCmvBB6wPU8+sTNKd8IjHfbCrQ+q:t1Dpp7cHUAmJ5PU8R4d7sD
Static task
static1
Behavioral task
behavioral1
Sample
821a63c55ae283f530eebdec1d05e080N.exe
Resource
win7-20240705-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
821a63c55ae283f530eebdec1d05e080N.exe
-
Size
92KB
-
MD5
821a63c55ae283f530eebdec1d05e080
-
SHA1
9cc5342b11b4bea4cf1f17e005ee6bc188d6bca2
-
SHA256
f1ec842389825506025a0b0840c144a685c6dbf5ca17ce5981bbe4901731507f
-
SHA512
a1c8bce69280c2b0021ed9b28b458141fe60f7a7718107322bc9ea4f2ef6b783cd1936817df86195c8a5d999572f199bc17983b7eadcbcdc72ed4cfce57a25f7
-
SSDEEP
1536:0vcLvfWIqsDGSZp76jscHqOIYXUYsJCmvBB6wPU8+sTNKd8IjHfbCrQ+q:t1Dpp7cHUAmJ5PU8R4d7sD
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5