Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    413c800774c2169d9764c4b71fe0b6a6

  • Size

    506KB

  • Sample

    240104-szgd1aeafp

  • MD5

    413c800774c2169d9764c4b71fe0b6a6

  • SHA1

    27c17fdd878f512e3953ecb1258083866dcd2bc4

  • SHA256

    1606a4e0484b9da96b2eb49c639afc88f461144a8e62777b0ff05f4f41c265c9

  • SHA512

    b30773f1a6b9dfb53c9324eca7719746d7d1b30303c8a0678640b1460df60cbefcaf84bde3ee7a393fbb00b974f6ba81c5e5cbcbce3bbe3f7e403f636d5b1120

  • SSDEEP

    12288:aEotgFF8tuho2cHQn/AY5SSTjhqt/ZyWn:4tcF8t6cH0I2lTwjn

Score
7/10

Malware Config

Targets

    • Target

      413c800774c2169d9764c4b71fe0b6a6

    • Size

      506KB

    • MD5

      413c800774c2169d9764c4b71fe0b6a6

    • SHA1

      27c17fdd878f512e3953ecb1258083866dcd2bc4

    • SHA256

      1606a4e0484b9da96b2eb49c639afc88f461144a8e62777b0ff05f4f41c265c9

    • SHA512

      b30773f1a6b9dfb53c9324eca7719746d7d1b30303c8a0678640b1460df60cbefcaf84bde3ee7a393fbb00b974f6ba81c5e5cbcbce3bbe3f7e403f636d5b1120

    • SSDEEP

      12288:aEotgFF8tuho2cHQn/AY5SSTjhqt/ZyWn:4tcF8t6cH0I2lTwjn

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks