Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Doc_009846464.exe

  • Size

    344KB

  • Sample

    221006-rpkg8shhcm

  • MD5

    b66c56a275326ea35e437242c8c8d871

  • SHA1

    0d2c46927c341ff5541bc6dd5af43cfc79dcbb5e

  • SHA256

    21852b2ff6ff17e36e045883dbd5c30aabf801db69a5fed6451aaec120ad2391

  • SHA512

    7f3f58b6e263d653a12dad7856cb66004fc87ca7448b0ebcb5f505d60d0979a2e8373a4f14d4ff938c8c2e0612bedaf0fcb9105a6c18648bd01154878ef05e5e

  • SSDEEP

    6144:RhRm2R6I+wKhsbacJKU20JLxuooOnTKPp7qcoC6jnwYduiiqRt:LU2+wrbrJKUzJUooOn2P9LoBjw1iHRt

Malware Config

Targets

    • Target

      Doc_009846464.exe

    • Size

      344KB

    • MD5

      b66c56a275326ea35e437242c8c8d871

    • SHA1

      0d2c46927c341ff5541bc6dd5af43cfc79dcbb5e

    • SHA256

      21852b2ff6ff17e36e045883dbd5c30aabf801db69a5fed6451aaec120ad2391

    • SHA512

      7f3f58b6e263d653a12dad7856cb66004fc87ca7448b0ebcb5f505d60d0979a2e8373a4f14d4ff938c8c2e0612bedaf0fcb9105a6c18648bd01154878ef05e5e

    • SSDEEP

      6144:RhRm2R6I+wKhsbacJKU20JLxuooOnTKPp7qcoC6jnwYduiiqRt:LU2+wrbrJKUzJUooOn2P9LoBjw1iHRt

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks