Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05

  • Size

    2.6MB

  • Sample

    220920-2al3maeed5

  • MD5

    0c717a4d5c7c6a0716fa3d788f0b2cdd

  • SHA1

    ccebe3bfbd0f46942c27e898b67dcd56c2dd7e27

  • SHA256

    789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05

  • SHA512

    314e1c5b4569f7ca2db449f4fe5d86dd56972ae59c08ce82618d889c2c311b5d744cb4d52fd7f89411afc30c7e185d8ef46274e2b205076b584bb74a9dd997af

  • SSDEEP

    49152:DmVRGHUBcBLZ3K5va9tNCyK4Vs9mOpLbO88y8kiaAm3EmB5hwVjrrkxCP3RcdlsG:DmVRbO5Za5voN2aso4bOKiaB3Em1wht5

Malware Config

Targets

    • Target

      789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05

    • Size

      2.6MB

    • MD5

      0c717a4d5c7c6a0716fa3d788f0b2cdd

    • SHA1

      ccebe3bfbd0f46942c27e898b67dcd56c2dd7e27

    • SHA256

      789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05

    • SHA512

      314e1c5b4569f7ca2db449f4fe5d86dd56972ae59c08ce82618d889c2c311b5d744cb4d52fd7f89411afc30c7e185d8ef46274e2b205076b584bb74a9dd997af

    • SSDEEP

      49152:DmVRGHUBcBLZ3K5va9tNCyK4Vs9mOpLbO88y8kiaAm3EmB5hwVjrrkxCP3RcdlsG:DmVRbO5Za5voN2aso4bOKiaB3Em1wht5

    • Detects Eternity clipper

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Executes dropped EXE

    • Adds Run key to start application

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks