Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    setup.exe

  • Size

    90KB

  • Sample

    230824-wg955sga8w

  • MD5

    9311435ce413103409c0b40745a4d608

  • SHA1

    55a8a86908a8e4b6aa6340da92fafb6d31dd5b9c

  • SHA256

    076c4ef38880870f3abf6954a1b736e305d282dfdb165e1554aaf0c2297c84d9

  • SHA512

    d44cfbebc706b614cb02979d4781289f900352f803671621f7a050fba8b9de867375fd645c612990a8405abde96b0df943dec0139d485e92c21c359852971921

  • SSDEEP

    1536:4q7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfrwEOz:v7DhdC6kzWypvaQ0FxyNTBfrq

Score
9/10

Malware Config

Targets

    • Target

      setup.exe

    • Size

      90KB

    • MD5

      9311435ce413103409c0b40745a4d608

    • SHA1

      55a8a86908a8e4b6aa6340da92fafb6d31dd5b9c

    • SHA256

      076c4ef38880870f3abf6954a1b736e305d282dfdb165e1554aaf0c2297c84d9

    • SHA512

      d44cfbebc706b614cb02979d4781289f900352f803671621f7a050fba8b9de867375fd645c612990a8405abde96b0df943dec0139d485e92c21c359852971921

    • SSDEEP

      1536:4q7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfrwEOz:v7DhdC6kzWypvaQ0FxyNTBfrq

    Score
    9/10
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (822) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks