Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b

  • Size

    850KB

  • Sample

    240304-qwnmssbe2s

  • MD5

    b42ae7a9d44a5a0d8575a093fa2fe6c1

  • SHA1

    e68a5bbcc35caca87e77af22833658c6a881ab8c

  • SHA256

    2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b

  • SHA512

    41f4c81cd792546a53781f805a4d0accbbe7b66295deebec9cc52711554031b1e4942085d9c371204af947ca995eab9eb92d1812790e7dbb98681240f05cdc4c

  • SSDEEP

    24576:MbgG0BHv4m+85ACmZQLwoLfQ01PRBad/XpD7AoR:2gL+ohmZewoLfxRA17J

Score
7/10

Malware Config

Targets

    • Target

      2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b

    • Size

      850KB

    • MD5

      b42ae7a9d44a5a0d8575a093fa2fe6c1

    • SHA1

      e68a5bbcc35caca87e77af22833658c6a881ab8c

    • SHA256

      2ef85d89139349e740a67f44635a5876b0b68ecdf7bd30b791987e160eabf64b

    • SHA512

      41f4c81cd792546a53781f805a4d0accbbe7b66295deebec9cc52711554031b1e4942085d9c371204af947ca995eab9eb92d1812790e7dbb98681240f05cdc4c

    • SSDEEP

      24576:MbgG0BHv4m+85ACmZQLwoLfQ01PRBad/XpD7AoR:2gL+ohmZewoLfxRA17J

    Score
    7/10
    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks