Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.W32.Injector.ETRR-2693.10982.exe

  • Size

    307KB

  • Sample

    220920-mchewscfg5

  • MD5

    5907dff1d78efc94eae6c08342f819fc

  • SHA1

    74187aee526293b2f4079d3ef920a704642fe768

  • SHA256

    a9acac2bc60cd65b24257dcd59cba1f79a5d8ebe6b68cffef12968038acd2675

  • SHA512

    cff49eecbb2ff3fd49c10e49b19231e2ca28b9086c79cc2c58e8bbcfa433064ba430c4c78e736b8487c76d7f82f93a0edbfed0537252ac17d99a63958d64b3cd

  • SSDEEP

    6144:Rhgqhw9oAFPZVheNA+ff0Rx0qYe91GDonGTy3FZWe:kqknhe2e6Obvm/We

Malware Config

Targets

    • Target

      SecuriteInfo.com.W32.Injector.ETRR-2693.10982.exe

    • Size

      307KB

    • MD5

      5907dff1d78efc94eae6c08342f819fc

    • SHA1

      74187aee526293b2f4079d3ef920a704642fe768

    • SHA256

      a9acac2bc60cd65b24257dcd59cba1f79a5d8ebe6b68cffef12968038acd2675

    • SHA512

      cff49eecbb2ff3fd49c10e49b19231e2ca28b9086c79cc2c58e8bbcfa433064ba430c4c78e736b8487c76d7f82f93a0edbfed0537252ac17d99a63958d64b3cd

    • SSDEEP

      6144:Rhgqhw9oAFPZVheNA+ff0Rx0qYe91GDonGTy3FZWe:kqknhe2e6Obvm/We

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks