Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    FURY_116.zip

  • Size

    24.2MB

  • Sample

    240225-vn3tzagf45

  • MD5

    631f4a3407e4e6eb88c418a81c38dbcb

  • SHA1

    f664bac189f05f3083fe8bee2440601dc3792acd

  • SHA256

    3572a9b3719b56028c4bb7c935333fbdab9e0eb58c084e559cece55242578cff

  • SHA512

    244ffcee97dc310f7583645e0455e58c134e436e0e7a8eece311644a2e5dc815be7b748e57022af4ff40cd5d33b6572a98f0303ea4356df805cd6892fbbfb459

  • SSDEEP

    786432:3XikhRY4TfBA7VMqJz7pcm0BBA2ZINA6IORji:3Xik+7aqJz7pxd2ZeIORji

Score
8/10

Malware Config

Targets

    • Target

      Fury.dll

    • Size

      24.2MB

    • MD5

      eba0040e4ca554f83d33dc0f0b18c7fe

    • SHA1

      51290e1b3c818443fdf9d1ca38eba27184a5e95b

    • SHA256

      ff158fde8976b84f0a88eb3097820f746e98429fde57372a0a1a6ecd1d223660

    • SHA512

      8ff7e905883f15e5cbcc07940d3640cd3e4e0cae86645a97acc43a9d3272b787c5a154073b87fb2193e7da2d8622226e315c6f89f166abf8e813e04f80861a2c

    • SSDEEP

      786432:mUSzR+w9hhQnV6gnKYSp5oQrkFcE++D5:mUSIn8gnvzQrm++D5

    Score
    8/10
    • Blocklisted process makes network request

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      Fury.exe

    • Size

      204KB

    • MD5

      ab38177a2317fcae0f3edec81bd2d9f8

    • SHA1

      0749e036589168ff4b17db218a0ecd311af9a5ab

    • SHA256

      0d97e5cf79b799a96c570e656172ef17d9b0abe6f3b85be7f358e6cc2e26336d

    • SHA512

      c9c8b0e322e4e3b5cdaa222bbcdcdf7c8453d0d2f3a94faa0585d5be9803dc14426f61ffdc346de7eab57760133dcc47df40f60d739558110f2aae7e1a1d6779

    • SSDEEP

      3072:UdnxH5FlWL42wQLjhoygr+gH6MTXnTspmu1:Kzl44MhoymaMTXnTZu1

    Score
    1/10

MITRE ATT&CK Matrix

Tasks