Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    30b1fefebbe1124f0715cf6cc3b9f6d793ee8104fc91e2f153ec9a33e98f8476

  • Size

    883KB

  • Sample

    231114-xwgb2seg36

  • MD5

    a0a1ec9b7cc37fa22bc6e0121d5e709f

  • SHA1

    fbe9c7e94b313b3677377de2c4368fd4011ed95c

  • SHA256

    30b1fefebbe1124f0715cf6cc3b9f6d793ee8104fc91e2f153ec9a33e98f8476

  • SHA512

    2703a718aa71bfe793edd5aec5d3d95a0b5d6411df3d080f7e7f7e7fdf4ea6909c407cb8240645c4d236bdda120a89295cdb19a40b29f9d7759c4c02c30426b0

  • SSDEEP

    24576:n0xFKA7aSZbFjO5E3H4xeImmMF02n5a/ZS:n0yFKRjOj1mng

Score
7/10

Malware Config

Targets

    • Target

      30b1fefebbe1124f0715cf6cc3b9f6d793ee8104fc91e2f153ec9a33e98f8476

    • Size

      883KB

    • MD5

      a0a1ec9b7cc37fa22bc6e0121d5e709f

    • SHA1

      fbe9c7e94b313b3677377de2c4368fd4011ed95c

    • SHA256

      30b1fefebbe1124f0715cf6cc3b9f6d793ee8104fc91e2f153ec9a33e98f8476

    • SHA512

      2703a718aa71bfe793edd5aec5d3d95a0b5d6411df3d080f7e7f7e7fdf4ea6909c407cb8240645c4d236bdda120a89295cdb19a40b29f9d7759c4c02c30426b0

    • SSDEEP

      24576:n0xFKA7aSZbFjO5E3H4xeImmMF02n5a/ZS:n0yFKRjOj1mng

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks