Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cf2d03721f971c4542360c2e3d65bfddeb66c7ddcc4e857ee7a4077b7856cda0

  • Size

    395KB

  • Sample

    220919-ceagysbfd8

  • MD5

    e9269ac557da9d2224310c88ff663298

  • SHA1

    a729db7ceed90d63a8f1dd7b5dafee20cab6a58a

  • SHA256

    cf2d03721f971c4542360c2e3d65bfddeb66c7ddcc4e857ee7a4077b7856cda0

  • SHA512

    2e89fd4833af0a4ad04e4de0586b22b28a3b43a4acad3096d0cf37c20671bac79e152359ee125ddacff216046f3e0ada0401d13e539ea85e486dc20e41563dfc

  • SSDEEP

    6144:XJHSZ8EyLzuVeOk9oy0STjfg0HVGZlnF5hQQV+NPXnlAG0sOogS6Xe+z:Lial0SHggVGZlF5hfEnlli

Score
10/10

Malware Config

Targets

    • Target

      cf2d03721f971c4542360c2e3d65bfddeb66c7ddcc4e857ee7a4077b7856cda0

    • Size

      395KB

    • MD5

      e9269ac557da9d2224310c88ff663298

    • SHA1

      a729db7ceed90d63a8f1dd7b5dafee20cab6a58a

    • SHA256

      cf2d03721f971c4542360c2e3d65bfddeb66c7ddcc4e857ee7a4077b7856cda0

    • SHA512

      2e89fd4833af0a4ad04e4de0586b22b28a3b43a4acad3096d0cf37c20671bac79e152359ee125ddacff216046f3e0ada0401d13e539ea85e486dc20e41563dfc

    • SSDEEP

      6144:XJHSZ8EyLzuVeOk9oy0STjfg0HVGZlnF5hQQV+NPXnlAG0sOogS6Xe+z:Lial0SHggVGZlF5hfEnlli

    Score
    10/10
    • Modifies security service

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks