Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb5863ec076f38f68a8db2fceb316d07f621e87ba72bfca085a243a651686866.zip

  • Size

    1KB

  • Sample

    250327-tecqrawqx7

  • MD5

    ca77c43a967085d5a8110c4385f49b8f

  • SHA1

    a3a31c88b10ac46e7b216e6bd4b0bec17a9c1e9c

  • SHA256

    eb5863ec076f38f68a8db2fceb316d07f621e87ba72bfca085a243a651686866

  • SHA512

    243b82eaccde650f42ee4356d598d0cfcdc4a1f0204f59b6403690e3b30334e8568ecd938bafec5719ba325288f28f17dd249ee2fc15160c31170e95faf5269f

Malware Config

Targets

    • Target

      80faa26a8f697e16f72239936a4ef7863742c78dc2a997abaf3265cda51a5514.sh

    • Size

      5KB

    • MD5

      7b72cf30ac42c20f0a14b0b87425c00a

    • SHA1

      74402152ac0f0c9dfed6f76975080ce1d0d4584d

    • SHA256

      80faa26a8f697e16f72239936a4ef7863742c78dc2a997abaf3265cda51a5514

    • SHA512

      1587b6707b334800f2c4fa7d664542cda84a63c5534b4513003f786058b7d2ef6d22f0f18bdb3d6a81c6a4ea8897453592d4c9bcea0a2e2b62a47f325dbff5eb

    • SSDEEP

      96:Dy0G/8yXwI7gzNnwNnP7fbunnbunJKDnWDnbJtgTGQFE/WztGz:Dw5XwKgRaTzUbUesdtgTGQFE/G8

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Attempts to change immutable files

      Modifies inode attributes on the filesystem to allow changing of immutable files.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Write file to user bin folder

MITRE ATT&CK Enterprise v15

Tasks