Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

SKILL5F01A.html

windows11-21h2-x64

8

Resubmissions

05/12/2024, 14:53

241205-r9qjzsvqaq 4

04/10/2024, 15:19

241004-sp7s7s1eqn 8

04/10/2024, 15:16

241004-snfnbsvgka 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SKILL5F01A

  • Size

    1KB

  • Sample

    241004-sp7s7s1eqn

  • MD5

    9b99168d579d59abecfdb6bc3fefa445

  • SHA1

    92bb5304d8fca19659b55dcf4870e959fa9e4036

  • SHA256

    c66900f029f679df634c4a08aa08b8f0ceb5197cd653cb659f4c3d081faf89fc

  • SHA512

    d94433ff78f69822b6ceb07315a3d5251844ba005bbac060fffa0fdee311789962ab60d77e114e53f0ca283953a1f7033a80ef2c050e02d24be445629fda50ea

Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      SKILL5F01A

    • Size

      1KB

    • MD5

      9b99168d579d59abecfdb6bc3fefa445

    • SHA1

      92bb5304d8fca19659b55dcf4870e959fa9e4036

    • SHA256

      c66900f029f679df634c4a08aa08b8f0ceb5197cd653cb659f4c3d081faf89fc

    • SHA512

      d94433ff78f69822b6ceb07315a3d5251844ba005bbac060fffa0fdee311789962ab60d77e114e53f0ca283953a1f7033a80ef2c050e02d24be445629fda50ea

    Score
    8/10
    defense_evasiondiscoverypersistence

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks