Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    27f40c492bc1932d6dcc378d3c67e0f9eb5ffa4b7f948f15dba900158fe48545

  • Size

    1.3MB

  • Sample

    231119-fkwtxshg6t

  • MD5

    f50c3c431d247986b5302e1ea8a14ccd

  • SHA1

    e0658d80f8d42909f5e57333ccbd3f1856e012ef

  • SHA256

    27f40c492bc1932d6dcc378d3c67e0f9eb5ffa4b7f948f15dba900158fe48545

  • SHA512

    98bee1c316fbb9d07ae2771a127b583ffe0f6acd5d543bee1f547dd03e174a877ecbd7679e876047da3684864bac85dfe3f61eff083f4cd1c172d2a831a021af

  • SSDEEP

    24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6

Malware Config

Extracted

Family

risepro

C2

194.49.94.152

Targets

    • Target

      27f40c492bc1932d6dcc378d3c67e0f9eb5ffa4b7f948f15dba900158fe48545

    • Size

      1.3MB

    • MD5

      f50c3c431d247986b5302e1ea8a14ccd

    • SHA1

      e0658d80f8d42909f5e57333ccbd3f1856e012ef

    • SHA256

      27f40c492bc1932d6dcc378d3c67e0f9eb5ffa4b7f948f15dba900158fe48545

    • SHA512

      98bee1c316fbb9d07ae2771a127b583ffe0f6acd5d543bee1f547dd03e174a877ecbd7679e876047da3684864bac85dfe3f61eff083f4cd1c172d2a831a021af

    • SSDEEP

      24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6

    Score
    7/10
    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks