Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SUPERCALCULATOR.exe

  • Size

    7.8MB

  • Sample

    231124-leew4sad5y

  • MD5

    fe0163ed6a3417cb6e6628bcc6b119e9

  • SHA1

    7cc27cf944b0d957d1afd597164d847571baccca

  • SHA256

    8e871e599503382b87d5046eadf266aca81eba11e32dc99f2eb23ed5367135ca

  • SHA512

    d0c8b7cfa041dc362c0d70a6663ac5d3249254b4f3a5650b2f3a85ee803e34be1ee7b77310d9dc9aa1c79c50dfdba54eca6e39b314682894315d91ddc57e0592

  • SSDEEP

    196608:JqGB7cp+Cb63VdQIp2+wSJxgQrOzfEquwjZUj73DuUu2xztM5E:EK8gFdQIwhExgYwfEqNjKj7zuUuIzyG

Malware Config

Targets

    • Target

      SUPERCALCULATOR.exe

    • Size

      7.8MB

    • MD5

      fe0163ed6a3417cb6e6628bcc6b119e9

    • SHA1

      7cc27cf944b0d957d1afd597164d847571baccca

    • SHA256

      8e871e599503382b87d5046eadf266aca81eba11e32dc99f2eb23ed5367135ca

    • SHA512

      d0c8b7cfa041dc362c0d70a6663ac5d3249254b4f3a5650b2f3a85ee803e34be1ee7b77310d9dc9aa1c79c50dfdba54eca6e39b314682894315d91ddc57e0592

    • SSDEEP

      196608:JqGB7cp+Cb63VdQIp2+wSJxgQrOzfEquwjZUj73DuUu2xztM5E:EK8gFdQIwhExgYwfEqNjKj7zuUuIzyG

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks