Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    811KB

  • Sample

    221103-1hl7xsfed4

  • MD5

    cc25b34fae0fab4310a268da338a6fca

  • SHA1

    54ae3e4451557295cefc0cad7685ba223a66ef29

  • SHA256

    1c4b01e1cc2b754ed518f940a1ac36d0b41a6b2ef0699679d970ebaadcc42446

  • SHA512

    39a52578f9e21cf78b7be5bf5447a677110c407b4e8b05aec17fd43c8ad1afc15f1c0c4825bd5e82abae9ec1859ccdf4ef47290feb2189085848142454dc519b

  • SSDEEP

    12288:5zOf/G5jWDiMB00nwVzMmd9CRnm1cNj9KHhShnKjxazKes7H:5yXIjaFLwRMmWm1cNh6hShKjxaq

Malware Config

Targets

    • Target

      file.exe

    • Size

      811KB

    • MD5

      cc25b34fae0fab4310a268da338a6fca

    • SHA1

      54ae3e4451557295cefc0cad7685ba223a66ef29

    • SHA256

      1c4b01e1cc2b754ed518f940a1ac36d0b41a6b2ef0699679d970ebaadcc42446

    • SHA512

      39a52578f9e21cf78b7be5bf5447a677110c407b4e8b05aec17fd43c8ad1afc15f1c0c4825bd5e82abae9ec1859ccdf4ef47290feb2189085848142454dc519b

    • SSDEEP

      12288:5zOf/G5jWDiMB00nwVzMmd9CRnm1cNj9KHhShnKjxazKes7H:5yXIjaFLwRMmWm1cNh6hShKjxaq

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks