Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b2fcde8b80e8e07cf1ac3afa5e110dc0d67556ff583771b73874b9422afa4c24

  • Size

    407KB

  • Sample

    221205-kfegascb24

  • MD5

    06392177fb86322b250e730563ad0b12

  • SHA1

    af8888959e3d0edf9d69717664babc99ddaac859

  • SHA256

    b2fcde8b80e8e07cf1ac3afa5e110dc0d67556ff583771b73874b9422afa4c24

  • SHA512

    7f17449ce1725a237afba7e6f53bb83c38a91edf9b0caeeb3e2782f92d25b1af4051f9051d5bc8a79779a6721c5c726cfa9717162155fe01207d7679860d3a0c

  • SSDEEP

    6144:TkE8FSh4HT7d2PojIvSdBo9zMeBmwRiU3bPP0N1vbm6Hq12IYI:ZX/5a2d7iU3b0y1Z

Malware Config

Targets

    • Target

      b2fcde8b80e8e07cf1ac3afa5e110dc0d67556ff583771b73874b9422afa4c24

    • Size

      407KB

    • MD5

      06392177fb86322b250e730563ad0b12

    • SHA1

      af8888959e3d0edf9d69717664babc99ddaac859

    • SHA256

      b2fcde8b80e8e07cf1ac3afa5e110dc0d67556ff583771b73874b9422afa4c24

    • SHA512

      7f17449ce1725a237afba7e6f53bb83c38a91edf9b0caeeb3e2782f92d25b1af4051f9051d5bc8a79779a6721c5c726cfa9717162155fe01207d7679860d3a0c

    • SSDEEP

      6144:TkE8FSh4HT7d2PojIvSdBo9zMeBmwRiU3bPP0N1vbm6Hq12IYI:ZX/5a2d7iU3b0y1Z

    • Adds Run key to start application

    • Detected potential entity reuse from brand microsoft.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks