Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7743584a5c872b0c634dba6a440b7c33d88064699ea6a9422d593c1c96136d7eN

  • Size

    839KB

  • Sample

    241001-yqdvea1gla

  • MD5

    fc4a05c0e0245dc948dbad9422713f00

  • SHA1

    1ab43660006b8dec1d7ea6a5bdb563900b893106

  • SHA256

    7743584a5c872b0c634dba6a440b7c33d88064699ea6a9422d593c1c96136d7e

  • SHA512

    55e09b78b53a7c38fff1cf10acc6bedc917de9621f2efb1464f83c64d908909e6d703acdadeb2a6a4e43673edcbd8274b756e036464248b4077319f9c218f8f2

  • SSDEEP

    12288:ESnEGNawIRDW0Q8IxoJqXvTcQHfeXG5e6vYXJCts678sOgHZrGqN840g:ESn/NrGC00oJEvTcQHgGeADIg5r3N8Zg

Malware Config

Targets

    • Target

      7743584a5c872b0c634dba6a440b7c33d88064699ea6a9422d593c1c96136d7eN

    • Size

      839KB

    • MD5

      fc4a05c0e0245dc948dbad9422713f00

    • SHA1

      1ab43660006b8dec1d7ea6a5bdb563900b893106

    • SHA256

      7743584a5c872b0c634dba6a440b7c33d88064699ea6a9422d593c1c96136d7e

    • SHA512

      55e09b78b53a7c38fff1cf10acc6bedc917de9621f2efb1464f83c64d908909e6d703acdadeb2a6a4e43673edcbd8274b756e036464248b4077319f9c218f8f2

    • SSDEEP

      12288:ESnEGNawIRDW0Q8IxoJqXvTcQHfeXG5e6vYXJCts678sOgHZrGqN840g:ESn/NrGC00oJEvTcQHgGeADIg5r3N8Zg

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks