Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
YogaDNSSetup.exe
-
Size
8.0MB
-
Sample
241012-nrfqaashjk
-
MD5
a1780f92321a1857505752a53888cebb
-
SHA1
77bb3b55f2704a50d9b8b3c67e5b2e57ad9824ed
-
SHA256
483e99a23d9348f63deab43c8f0c09afb2af9ca313ce401e27b9e31aeba7eb63
-
SHA512
b5b61b3be90d3952bbd4bf43bf383bab56c7de88afe4057990c8e1d238bece54781b9701b615c7a27d6bcc1ad6ebd537eb3a7be2c9a9df094c290c3d84bb4f15
-
SSDEEP
196608:RbfgBIO7uGevAeadYrsrnql79gG8l/oEqns:Vw9headYozql7Glgps
Static task
static1
Behavioral task
behavioral1
Sample
YogaDNSSetup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
YogaDNSSetup.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
YogaDNSSetup.exe
-
Size
8.0MB
-
MD5
a1780f92321a1857505752a53888cebb
-
SHA1
77bb3b55f2704a50d9b8b3c67e5b2e57ad9824ed
-
SHA256
483e99a23d9348f63deab43c8f0c09afb2af9ca313ce401e27b9e31aeba7eb63
-
SHA512
b5b61b3be90d3952bbd4bf43bf383bab56c7de88afe4057990c8e1d238bece54781b9701b615c7a27d6bcc1ad6ebd537eb3a7be2c9a9df094c290c3d84bb4f15
-
SSDEEP
196608:RbfgBIO7uGevAeadYrsrnql79gG8l/oEqns:Vw9headYozql7Glgps
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1