Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b9ea0745fdb68d9821c794df701ea8ca13bd96c07eb017139ba11f1b4962dd22

  • Size

    19KB

  • Sample

    221124-lc75wagg5s

  • MD5

    c58fe50c1866766cf729adfc1b7a137b

  • SHA1

    ad3b03413655ec694e19e3bb049f01de4cf9b12f

  • SHA256

    b9ea0745fdb68d9821c794df701ea8ca13bd96c07eb017139ba11f1b4962dd22

  • SHA512

    df024c4de1945e63c03c6b67d6c60c2a837dd78fc19b61047e2e12d2f78c283966c1d2beb3589bc46ff82c0a8c68b1e6b665ab20e7c3ff170408d427288400bc

  • SSDEEP

    384:P6uWkj/DijJeC6bUwCb9HeGMi9rt7FLRaohbOidTowE4nAgN9m+/LbntFggCiM32:iFkfijJelQwCb1eGb9BBoyS5gjmy3nQe

Score
8/10

Malware Config

Targets

    • Target

      lpk.dll

    • Size

      45KB

    • MD5

      6d69be00f87b765e1cf5c7303a2f4cd6

    • SHA1

      dcfd01e48cb6fd4abfb2168c927751396645fc88

    • SHA256

      3436427ba41d6b61d1cfc198f7bc1b2111ce6a69db83514acceb05c391c8c67c

    • SHA512

      a6f377b6ce9649a3b846c01074307d6dec93882e98de65fa032f65e314cfd71bfffa88b7829c24559b55f6a2b9fcea24728db04314777b27988545fb3efd7867

    • SSDEEP

      768:zojY9P368uUCS77GhGLhLpms1R6o9yHHojY9P:GmP6BS7LL18do9yHSm

    Score
    8/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    • Target

      二码分解小工具.exe

    • Size

      16KB

    • MD5

      7923032f236b967268751632ab4617f3

    • SHA1

      5422eed9588e2b14d222af7c967816b65bc79c73

    • SHA256

      7680abf32d4a98db6f50a791409817a78e3457aa444506dc955985c4f1ea3b54

    • SHA512

      48eb17d000c19d30356b0c57c56767e87db45d584cacd25b3f0b1f95d4024e89d54bca7cb3556faaaf3098b7be3adef66bcce3a313c35a8bba7aaa8449b982a3

    • SSDEEP

      96:Fv9lC4+m9lCIXCArTwmQtZmxSSE2NiUuhJ89EeeylQtZEa2:19lCW9lkHQXED7qxl0ma

    Score
    1/10

MITRE ATT&CK Matrix

Tasks