Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17706175c0994a2291a3c26c495328dfd1c2874a2665a2588afb465c6df0745bN

  • Size

    525KB

  • Sample

    240927-xkzdgsxapd

  • MD5

    abba7f45f81a0f78b9bcb8d06589f9f0

  • SHA1

    8bc35d466f7398613482f8d3b73edb14ca8a7baf

  • SHA256

    17706175c0994a2291a3c26c495328dfd1c2874a2665a2588afb465c6df0745b

  • SHA512

    4627d2a570b61eacb021ac1ae944abecc29078628b1b5557a03b0eac9e75d04a81a771158654f14799a1c160c4460ab9550d4e0755da9826c56d2feb97adf837

  • SSDEEP

    12288:UsAqMGHGSX1388BxGVILSY4oSewnvFdCWDOKGXCBffXA:UsBbWOSY4HewnvFdTDwSBQ

Malware Config

Targets

    • Target

      17706175c0994a2291a3c26c495328dfd1c2874a2665a2588afb465c6df0745bN

    • Size

      525KB

    • MD5

      abba7f45f81a0f78b9bcb8d06589f9f0

    • SHA1

      8bc35d466f7398613482f8d3b73edb14ca8a7baf

    • SHA256

      17706175c0994a2291a3c26c495328dfd1c2874a2665a2588afb465c6df0745b

    • SHA512

      4627d2a570b61eacb021ac1ae944abecc29078628b1b5557a03b0eac9e75d04a81a771158654f14799a1c160c4460ab9550d4e0755da9826c56d2feb97adf837

    • SSDEEP

      12288:UsAqMGHGSX1388BxGVILSY4oSewnvFdCWDOKGXCBffXA:UsBbWOSY4HewnvFdTDwSBQ

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks