Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    240c4228708c43ee4a011f0c3c31516226f40fba77c29fa218e8d19337d1c618

  • Size

    2.2MB

  • Sample

    250305-pd2k9sx1bz

  • MD5

    45c03c328c61248fb11afb746fcb7040

  • SHA1

    4b524964af0cd43613adaca4e7a6be8d23a39a70

  • SHA256

    240c4228708c43ee4a011f0c3c31516226f40fba77c29fa218e8d19337d1c618

  • SHA512

    e7498fad8403e74e05e97509b584a37c25662f0405fd6299675229929375c1c7499933d6cc74e28f3c44fc15ff638e86a8d43ac3bbbaaa2d4495a81b99e804c7

  • SSDEEP

    49152:npbRm4GPK/MveGTEtmBI5GEIZiGwoVDn99c1/0VXkjjAmZea+:p1GS/GByqi1uDnu0VXkHAmZeR

Malware Config

Targets

    • Target

      240c4228708c43ee4a011f0c3c31516226f40fba77c29fa218e8d19337d1c618

    • Size

      2.2MB

    • MD5

      45c03c328c61248fb11afb746fcb7040

    • SHA1

      4b524964af0cd43613adaca4e7a6be8d23a39a70

    • SHA256

      240c4228708c43ee4a011f0c3c31516226f40fba77c29fa218e8d19337d1c618

    • SHA512

      e7498fad8403e74e05e97509b584a37c25662f0405fd6299675229929375c1c7499933d6cc74e28f3c44fc15ff638e86a8d43ac3bbbaaa2d4495a81b99e804c7

    • SSDEEP

      49152:npbRm4GPK/MveGTEtmBI5GEIZiGwoVDn99c1/0VXkjjAmZea+:p1GS/GByqi1uDnu0VXkHAmZeR

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Banload family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

MITRE ATT&CK Enterprise v15

Tasks