Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559N
-
Size
1.0MB
-
Sample
241009-tt29ysyfjn
-
MD5
6f9278ef68dc128dbfb5b26a2175ec80
-
SHA1
ab9f27efb21d8c374f029b731a7d72fc2427130d
-
SHA256
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559
-
SHA512
aa3ae4019170a7aeff8b8371386565b4cbb0dba870b0a6cff8ce2cc0e9ccde19c24283fec0459994ec0c898613f6dc9cf66e1f6c7c8917480593072480cd7935
-
SSDEEP
24576:v6Zv2ivhBVnFys7xP86LkRCwPYfuukvDtiflQBU3jYY5QH:vE2ivhQs7dLkRumsUU3eH
Behavioral task
behavioral1
Sample
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559N.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559N
-
Size
1.0MB
-
MD5
6f9278ef68dc128dbfb5b26a2175ec80
-
SHA1
ab9f27efb21d8c374f029b731a7d72fc2427130d
-
SHA256
0f13a23d66d29cece0735366d0801a41ea02e2e54cd20f9a64200116fa196559
-
SHA512
aa3ae4019170a7aeff8b8371386565b4cbb0dba870b0a6cff8ce2cc0e9ccde19c24283fec0459994ec0c898613f6dc9cf66e1f6c7c8917480593072480cd7935
-
SSDEEP
24576:v6Zv2ivhBVnFys7xP86LkRCwPYfuukvDtiflQBU3jYY5QH:vE2ivhQs7dLkRumsUU3eH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1