Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

04/10/2024, 22:05 UTC

241004-1zxpzsyemk 6

04/10/2024, 17:48 UTC

241004-wdxqmsxemn 8

04/10/2024, 17:12 UTC

241004-vq4jaazgmb 8

04/10/2024, 16:01 UTC

241004-tggsgsxekf 6

04/10/2024, 15:22 UTC

241004-srv77a1fpm 8

General

  • Target

    https://malshare.com/sample.php?action=detail&hash=e8c4231db55021ca09e9e80c0e5376d92e6f61fde673ef428d9b5b7d7fb48553

  • Sample

    241004-srv77a1fpm

Malware Config

Targets

    • Target

      https://malshare.com/sample.php?action=detail&hash=e8c4231db55021ca09e9e80c0e5376d92e6f61fde673ef428d9b5b7d7fb48553

    • Downloads MZ/PE file

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Network Share Discovery

      Attempt to gather information on host network.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.