Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7c188d1a10d54a2ae7c73edf791fc3eda0091d5c2e417a34d2f2e8703e1e7ff0

  • Size

    137KB

  • Sample

    240902-ac3plswark

  • MD5

    437dacfde86b74e7192a6171f4f11612

  • SHA1

    f4ad766acc5bdb200b4013431fbf1414aaf10053

  • SHA256

    7c188d1a10d54a2ae7c73edf791fc3eda0091d5c2e417a34d2f2e8703e1e7ff0

  • SHA512

    0f30628a4c31baab7cbb95b11971aa14e199786ac970c21dea939e0df2b5dc1d97ba00d14166b4f6dd3aa116452a2f563ef4a6b9c2bb56fe56d4a7ddd043e498

  • SSDEEP

    3072:eR02WMK8RJGInTlhnaBanONVk40rpg4yeF/TyUGSK9FrafcUksPxx6iTUua:L25GgFny61mraQ

Malware Config

Targets

    • Target

      7c188d1a10d54a2ae7c73edf791fc3eda0091d5c2e417a34d2f2e8703e1e7ff0

    • Size

      137KB

    • MD5

      437dacfde86b74e7192a6171f4f11612

    • SHA1

      f4ad766acc5bdb200b4013431fbf1414aaf10053

    • SHA256

      7c188d1a10d54a2ae7c73edf791fc3eda0091d5c2e417a34d2f2e8703e1e7ff0

    • SHA512

      0f30628a4c31baab7cbb95b11971aa14e199786ac970c21dea939e0df2b5dc1d97ba00d14166b4f6dd3aa116452a2f563ef4a6b9c2bb56fe56d4a7ddd043e498

    • SSDEEP

      3072:eR02WMK8RJGInTlhnaBanONVk40rpg4yeF/TyUGSK9FrafcUksPxx6iTUua:L25GgFny61mraQ

    • Boot or Logon Autostart Execution: Port Monitors

      Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.

    • Sets service image path in registry

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks