Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2de382152f087a86363e204faaa6f9105ecd57a64bc6a3633e6645e2ce3efd9d
-
Size
3.0MB
-
Sample
240823-f61p1azdlm
-
MD5
4aed7b49f4896bb7d95648eff3ecde3e
-
SHA1
7f8cf0ca4e421c5f47dfd7509d99b8b7734bdbe4
-
SHA256
2de382152f087a86363e204faaa6f9105ecd57a64bc6a3633e6645e2ce3efd9d
-
SHA512
f1906764e8bb487785fb014f25145408d09605fa0188c0ff27ba8d66593225bbe669f6ea576dcfe700a2e8ba6271e45c78a6948d4996a71a2fcd7b2dc4f51ff8
-
SSDEEP
49152:9RefbRq+svmn5ZEzj3hbG9WDwAFSgrQRAqlqbqzNqAPdjpL:fefb4+qmn4z1bG9ES8QqMjpL
Static task
static1
Behavioral task
behavioral1
Sample
2de382152f087a86363e204faaa6f9105ecd57a64bc6a3633e6645e2ce3efd9d.exe
Resource
win7-20240704-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
2de382152f087a86363e204faaa6f9105ecd57a64bc6a3633e6645e2ce3efd9d
-
Size
3.0MB
-
MD5
4aed7b49f4896bb7d95648eff3ecde3e
-
SHA1
7f8cf0ca4e421c5f47dfd7509d99b8b7734bdbe4
-
SHA256
2de382152f087a86363e204faaa6f9105ecd57a64bc6a3633e6645e2ce3efd9d
-
SHA512
f1906764e8bb487785fb014f25145408d09605fa0188c0ff27ba8d66593225bbe669f6ea576dcfe700a2e8ba6271e45c78a6948d4996a71a2fcd7b2dc4f51ff8
-
SSDEEP
49152:9RefbRq+svmn5ZEzj3hbG9WDwAFSgrQRAqlqbqzNqAPdjpL:fefb4+qmn4z1bG9ES8QqMjpL
-
Modifies firewall policy service
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5