Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Client.exe
-
Size
547KB
-
Sample
240921-zbtsrasdkj
-
MD5
b87946891aa5a79edc4346f9ca654b9e
-
SHA1
e28cd91dea39a78b05aa9886dd1972956f9b85e7
-
SHA256
ec4d601c78d79d40972f3e172344d9f32eadd3fe902cc55d6f297f32a40bf3c6
-
SHA512
f7054d2a8aa4d4d2a20d15f30690474976e25a238a4bac5b1444c01d38d11bd8e763d53d61173e3f5b792b60b5422b941e59d07ce19e7292e407f696854f234e
-
SSDEEP
12288:UUJ9gdCrpfmRCbXNS46o7ik1JyMcbhMi07P:UvCrpfuCbNCyHZV
Static task
static1
Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Client.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Client.exe
-
Size
547KB
-
MD5
b87946891aa5a79edc4346f9ca654b9e
-
SHA1
e28cd91dea39a78b05aa9886dd1972956f9b85e7
-
SHA256
ec4d601c78d79d40972f3e172344d9f32eadd3fe902cc55d6f297f32a40bf3c6
-
SHA512
f7054d2a8aa4d4d2a20d15f30690474976e25a238a4bac5b1444c01d38d11bd8e763d53d61173e3f5b792b60b5422b941e59d07ce19e7292e407f696854f234e
-
SSDEEP
12288:UUJ9gdCrpfmRCbXNS46o7ik1JyMcbhMi07P:UvCrpfuCbNCyHZV
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Scheduled Task/Job
1Scheduled Task
1