Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

2025-03-25...ch.exe

windows7-x64

6

2025-03-25...ch.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-25_7736bdd0e9bdd1e16172898147a3aed4_poet-rat_sliver_snatch

  • Size

    14.3MB

  • Sample

    250325-ng188svxfv

  • MD5

    7736bdd0e9bdd1e16172898147a3aed4

  • SHA1

    cf7ccbf3e5632c451ca7d88b77a082adc6373e69

  • SHA256

    13bdd36f12b047e791ad26cd7bb33ba17fd7404f043fa8db9f6179171fb408bb

  • SHA512

    ba07db7fa9086e1124a6f7f6812ce1c0286c3d1f61c243ea558fbe726cd9bf64ececfb64cf94d355a4d0ae99605e9476e8856c237c7170a0beca47469b57666d

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRqhRYhRkhRBhRWhRohRBhRKhRG:DAkLRLRxRYR+RkR4RLRCR0RLReRG

Score
6/10
persistence

Malware Config

Targets

    • Target

      2025-03-25_7736bdd0e9bdd1e16172898147a3aed4_poet-rat_sliver_snatch

    • Size

      14.3MB

    • MD5

      7736bdd0e9bdd1e16172898147a3aed4

    • SHA1

      cf7ccbf3e5632c451ca7d88b77a082adc6373e69

    • SHA256

      13bdd36f12b047e791ad26cd7bb33ba17fd7404f043fa8db9f6179171fb408bb

    • SHA512

      ba07db7fa9086e1124a6f7f6812ce1c0286c3d1f61c243ea558fbe726cd9bf64ececfb64cf94d355a4d0ae99605e9476e8856c237c7170a0beca47469b57666d

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRqhRYhRkhRBhRWhRohRBhRKhRG:DAkLRLRxRYR+RkR4RLRCR0RLReRG

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks