Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2d55845fd457fcb9b21d35bdbf16e59d635dca8bd32190bc01f51a27aa957dca
-
Size
196KB
-
Sample
240904-gmrhnaxake
-
MD5
212e2f6497e15f8d9d5a645ee67b4557
-
SHA1
75c884c604dbfe129c2effbf11028b103cad6352
-
SHA256
2d55845fd457fcb9b21d35bdbf16e59d635dca8bd32190bc01f51a27aa957dca
-
SHA512
9438e977a0f31ecbd5b61adc8fb02390c23351176087bec65d8ed175d2a2baa581cb261dd04a8bea3e7e6c3b2352817baade88a1e050a130938e5042cd714fdd
-
SSDEEP
6144:sVrtGD5qm/Gv7dSG7d9JNN6L7l7AQWYMj0k2wXvqnalz0yKdJerzMmsOBYLx78lZ:cGDV/Gv7dSG7d9JNN6L7l7AQWYMj0k2g
Static task
static1
Behavioral task
behavioral1
Sample
2d55845fd457fcb9b21d35bdbf16e59d635dca8bd32190bc01f51a27aa957dca.exe
Resource
win7-20240903-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
2d55845fd457fcb9b21d35bdbf16e59d635dca8bd32190bc01f51a27aa957dca
-
Size
196KB
-
MD5
212e2f6497e15f8d9d5a645ee67b4557
-
SHA1
75c884c604dbfe129c2effbf11028b103cad6352
-
SHA256
2d55845fd457fcb9b21d35bdbf16e59d635dca8bd32190bc01f51a27aa957dca
-
SHA512
9438e977a0f31ecbd5b61adc8fb02390c23351176087bec65d8ed175d2a2baa581cb261dd04a8bea3e7e6c3b2352817baade88a1e050a130938e5042cd714fdd
-
SSDEEP
6144:sVrtGD5qm/Gv7dSG7d9JNN6L7l7AQWYMj0k2wXvqnalz0yKdJerzMmsOBYLx78lZ:cGDV/Gv7dSG7d9JNN6L7l7AQWYMj0k2g
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5