Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    l2.exe

  • Size

    26.2MB

  • Sample

    230614-g9l7fsdf8y

  • MD5

    131ddb28f23ec31a095f7e04cac53646

  • SHA1

    9aea97dbac5d239c3d39c01d2488cac5d394239e

  • SHA256

    21973e7163034e17a0291f57910d8720078317c9546f4b406f9de9ef5ffc90aa

  • SHA512

    1b44adcdf0df4a9d3feb64fc46ea936b5f6136bb6488c2bf3da9d1cfc8c5c5c5329c7616be6ac6a34e5d07db8e489546890efde0d7b671cdc7d88a45dd7618b3

  • SSDEEP

    786432:8bA3yvmBC3EZYMnfUaab76sKmut/ax1CKucMOR:LA3E+HapsKmC/Q1CKeOR

Score
7/10

Malware Config

Targets

    • Target

      l2.exe

    • Size

      26.2MB

    • MD5

      131ddb28f23ec31a095f7e04cac53646

    • SHA1

      9aea97dbac5d239c3d39c01d2488cac5d394239e

    • SHA256

      21973e7163034e17a0291f57910d8720078317c9546f4b406f9de9ef5ffc90aa

    • SHA512

      1b44adcdf0df4a9d3feb64fc46ea936b5f6136bb6488c2bf3da9d1cfc8c5c5c5329c7616be6ac6a34e5d07db8e489546890efde0d7b671cdc7d88a45dd7618b3

    • SSDEEP

      786432:8bA3yvmBC3EZYMnfUaab76sKmut/ax1CKucMOR:LA3E+HapsKmC/Q1CKeOR

    Score
    7/10
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks