Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b3e33c93cefc11619de42b3876063480N
-
Size
3.1MB
-
Sample
240912-jsyv2ayerg
-
MD5
b3e33c93cefc11619de42b3876063480
-
SHA1
7c5b487e67aa16aae375b107017a9b6b52547281
-
SHA256
e767398f9d479aaafbb817a8b3584be495e94efec64998afa9337c43ea71ddc0
-
SHA512
abe38e47abc4e9256791be87f659b0d0137fe2ebd21248a4d18da3994af65c1c0c2b690461b795c3a9bdf3b8303bb6d765390a2bd990ebc0ffeadbbe3b132729
-
SSDEEP
49152:+UJ6ZNXox4SgJhBsfHJq/nCFT4Mv0Pt97R:+tR4xGnCtvw9
Static task
static1
Behavioral task
behavioral1
Sample
b3e33c93cefc11619de42b3876063480N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3e33c93cefc11619de42b3876063480N.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
b3e33c93cefc11619de42b3876063480N
-
Size
3.1MB
-
MD5
b3e33c93cefc11619de42b3876063480
-
SHA1
7c5b487e67aa16aae375b107017a9b6b52547281
-
SHA256
e767398f9d479aaafbb817a8b3584be495e94efec64998afa9337c43ea71ddc0
-
SHA512
abe38e47abc4e9256791be87f659b0d0137fe2ebd21248a4d18da3994af65c1c0c2b690461b795c3a9bdf3b8303bb6d765390a2bd990ebc0ffeadbbe3b132729
-
SSDEEP
49152:+UJ6ZNXox4SgJhBsfHJq/nCFT4Mv0Pt97R:+tR4xGnCtvw9
-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Hide Artifacts
1Hidden Files and Directories
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
4Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1