Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

sample.html

windows11-21h2-x64

8

Resubmissions

09/03/2025, 09:08

250309-k31m2szkx5 1

09/03/2025, 08:57

250309-kw35lazsgv 10

09/03/2025, 08:35

250309-khevvazjx3 10

09/03/2025, 08:28

250309-kc7cxazjv3 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sample

  • Size

    218KB

  • Sample

    250309-kc7cxazjv3

  • MD5

    3f06b47847759782317c7542e1b2c761

  • SHA1

    71880ad118b1e577fcc6839a6906b739dfe03c23

  • SHA256

    da4cc1b53a91259c68033e08d90e4bbef47df7ae48369a6b86e1f2de4d753932

  • SHA512

    6d68c779d7cb118a19917d083538fecdbdf29d8886cb8eb31436e2bf6cb1ce76de35ca496cbebc80505ee34e818a6bbed223e7540079c42553b3962c33f568eb

  • SSDEEP

    1536:34Edd0E6RJNvZO+uzA+QmMJUDmidraCOljmFSwP6AhUdcC/cl2h7ZBog3B:HbDmU5yPKg3B

Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      sample

    • Size

      218KB

    • MD5

      3f06b47847759782317c7542e1b2c761

    • SHA1

      71880ad118b1e577fcc6839a6906b739dfe03c23

    • SHA256

      da4cc1b53a91259c68033e08d90e4bbef47df7ae48369a6b86e1f2de4d753932

    • SHA512

      6d68c779d7cb118a19917d083538fecdbdf29d8886cb8eb31436e2bf6cb1ce76de35ca496cbebc80505ee34e818a6bbed223e7540079c42553b3962c33f568eb

    • SSDEEP

      1536:34Edd0E6RJNvZO+uzA+QmMJUDmidraCOljmFSwP6AhUdcC/cl2h7ZBog3B:HbDmU5yPKg3B

    Score
    8/10
    defense_evasiondiscoverypersistenceprivilege_escalation

    • Downloads MZ/PE file

    • Modifies Windows Firewall

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Event Triggered Execution

1
T1546

Netsh Helper DLL

1
T1546.007

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Impair Defenses

1
T1562

Disable or Modify System Firewall

1
T1562.004

Modify Registry

1
T1112

Subvert Trust Controls

1
T1553

SIP and Trust Provider Hijacking

1
T1553.003

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Web Service

1
T1102

Exfiltration

Impact

Tasks