Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eac85f06241ae46aa55469c12f521c10N

  • Size

    430KB

  • Sample

    240825-289ata1cjb

  • MD5

    eac85f06241ae46aa55469c12f521c10

  • SHA1

    3ca1a9ab3a572ebd9d2ab70c45ea40c45daf632d

  • SHA256

    ca94f502026c5ac760c1a502cdc211a112581de334e8ad0363d0108499666b60

  • SHA512

    a5c47d54d321553f1bc60678d5ff6558666b80fa9673c8ddc34609a96788fbf0371c75bf9adf669c25752378edf0ec65b75f7289cf3ab8807c7e64bfaf894407

  • SSDEEP

    12288:ntKe6Zv23YeVOsiFKClC1NJhkbOOpPFrVQE61N4:76Zv2lZiFTqD2OOprQNN4

Malware Config

Targets

    • Target

      eac85f06241ae46aa55469c12f521c10N

    • Size

      430KB

    • MD5

      eac85f06241ae46aa55469c12f521c10

    • SHA1

      3ca1a9ab3a572ebd9d2ab70c45ea40c45daf632d

    • SHA256

      ca94f502026c5ac760c1a502cdc211a112581de334e8ad0363d0108499666b60

    • SHA512

      a5c47d54d321553f1bc60678d5ff6558666b80fa9673c8ddc34609a96788fbf0371c75bf9adf669c25752378edf0ec65b75f7289cf3ab8807c7e64bfaf894407

    • SSDEEP

      12288:ntKe6Zv23YeVOsiFKClC1NJhkbOOpPFrVQE61N4:76Zv2lZiFTqD2OOprQNN4

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks