Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    453e8d5897ce07b29bc8df2312686cca8d2df37bcf43b1e7e0d5c8b0ee585a3f.exe

  • Size

    81KB

  • Sample

    241003-bqv3csxbrj

  • MD5

    9ffc98a16aba4841e94b24ccabf219ab

  • SHA1

    31925b39e3255446a3b0803da2f75337329f6a65

  • SHA256

    453e8d5897ce07b29bc8df2312686cca8d2df37bcf43b1e7e0d5c8b0ee585a3f

  • SHA512

    390da771544bc23fd3b00db6dbd78b9b9d2846380cc162af759372e28da3b5ed8c01e380ed538cbe4fdc68269b5e98915e439db85e86792c0ad8a078f5de1484

  • SSDEEP

    1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYH7IxD:7enkyfPAwiMq0RqRfbaxZJYYH

Malware Config

Targets

    • Target

      453e8d5897ce07b29bc8df2312686cca8d2df37bcf43b1e7e0d5c8b0ee585a3f.exe

    • Size

      81KB

    • MD5

      9ffc98a16aba4841e94b24ccabf219ab

    • SHA1

      31925b39e3255446a3b0803da2f75337329f6a65

    • SHA256

      453e8d5897ce07b29bc8df2312686cca8d2df37bcf43b1e7e0d5c8b0ee585a3f

    • SHA512

      390da771544bc23fd3b00db6dbd78b9b9d2846380cc162af759372e28da3b5ed8c01e380ed538cbe4fdc68269b5e98915e439db85e86792c0ad8a078f5de1484

    • SSDEEP

      1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYH7IxD:7enkyfPAwiMq0RqRfbaxZJYYH

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Sets service image path in registry

    • Downloads MZ/PE file

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks