Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

2025-03-25...ch.exe

windows7-x64

6

2025-03-25...ch.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-25_6be16213afc8338890849064fe2a8a97_poet-rat_sliver_snatch

  • Size

    14.4MB

  • Sample

    250325-nhyjqsynv4

  • MD5

    6be16213afc8338890849064fe2a8a97

  • SHA1

    bf6bd4dcfa44d09ff37552696eeba89b5b222f73

  • SHA256

    0c6ca8bee1ae329129634711d53356bf7bd13f86b9e68140dc5dd664f1f8c08c

  • SHA512

    3524629bfea2df4be81e6d8644301abdbdb90abb163d196eba2f0755b6d457b0cddbfe4acf8e12662df94420e755a641ae3de4ea2340edf52a18b6cda4cb867b

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRqhRYhRkhRBhRWhRohRBhRKhRf:DAkLRLRxRYR+RkR4RLRCR0RLReRf

Score
6/10
persistence

Malware Config

Targets

    • Target

      2025-03-25_6be16213afc8338890849064fe2a8a97_poet-rat_sliver_snatch

    • Size

      14.4MB

    • MD5

      6be16213afc8338890849064fe2a8a97

    • SHA1

      bf6bd4dcfa44d09ff37552696eeba89b5b222f73

    • SHA256

      0c6ca8bee1ae329129634711d53356bf7bd13f86b9e68140dc5dd664f1f8c08c

    • SHA512

      3524629bfea2df4be81e6d8644301abdbdb90abb163d196eba2f0755b6d457b0cddbfe4acf8e12662df94420e755a641ae3de4ea2340edf52a18b6cda4cb867b

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRqhRYhRkhRBhRWhRohRBhRKhRf:DAkLRLRxRYR+RkR4RLRCR0RLReRf

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks