Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat

  • Size

    931KB

  • Sample

    221019-mv1desfhaq

  • MD5

    b5c6bf928455a865d23284c92ee0d6f9

  • SHA1

    d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b

  • SHA256

    80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6

  • SHA512

    86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc

  • SSDEEP

    24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0

Malware Config

Targets

    • Target

      45.139.105.159_-_files_-_dVVORMr.exe___b5c6bf928455a865d23284c92ee0d6f9.dat

    • Size

      931KB

    • MD5

      b5c6bf928455a865d23284c92ee0d6f9

    • SHA1

      d1dd08dda99dd92c3ac3233d86e6ee35413c8e2b

    • SHA256

      80067654edee465f36b83d436bcfe0002d4da5b57a16df9545afed6912e379a6

    • SHA512

      86f7ee60f7bde54cc0d2a3c2686e125e6728e3cdb675349290a2c63c366d83c35e916111e449904d88146da70e41e4eb4acd41642f7d55656b8984158a8c99cc

    • SSDEEP

      24576:jyJE/eo0zlvyn9DiwzjNVVreEqrA6eyz+1ro:2rSD5zjDV36nq0

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks