Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ares.exe

  • Size

    9.5MB

  • Sample

    230204-15dt3aab7t

  • MD5

    33b25341be43c3772804c2c202042ec7

  • SHA1

    a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b

  • SHA256

    2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe

  • SHA512

    0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba

  • SSDEEP

    196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC

Score
7/10

Malware Config

Targets

    • Target

      ares.exe

    • Size

      9.5MB

    • MD5

      33b25341be43c3772804c2c202042ec7

    • SHA1

      a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b

    • SHA256

      2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe

    • SHA512

      0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba

    • SSDEEP

      196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC

    Score
    7/10
    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix

Tasks