Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d3f526c8767e900d243200bba821e3bf

  • Size

    171KB

  • Sample

    240318-ts5zfsde3y

  • MD5

    d3f526c8767e900d243200bba821e3bf

  • SHA1

    a4941f9446d9f134e5ecec8f6c5b56d80e645e2c

  • SHA256

    20aaee1ac8fd694ad7dd941432676adb62160319b683636499541882031ff13e

  • SHA512

    b312518645b4ee1290aba14ece017d19fa6213dbba86ce8f7c7e03ca2d13131b2521c87602f521cbab302722e46e89ac981f713a83f7ad2ed305de51167a327a

  • SSDEEP

    3072:bB4FJDDTw6EVSp0ydsKA/QcbM7f5CGg4I7DA5a/c2AHJyWza9q4iuOneRLaZmqQV:bBqDDs6asU7DA5F2Cyt9DGeRLaZmqsDJ

Malware Config

Targets

    • Target

      d3f526c8767e900d243200bba821e3bf

    • Size

      171KB

    • MD5

      d3f526c8767e900d243200bba821e3bf

    • SHA1

      a4941f9446d9f134e5ecec8f6c5b56d80e645e2c

    • SHA256

      20aaee1ac8fd694ad7dd941432676adb62160319b683636499541882031ff13e

    • SHA512

      b312518645b4ee1290aba14ece017d19fa6213dbba86ce8f7c7e03ca2d13131b2521c87602f521cbab302722e46e89ac981f713a83f7ad2ed305de51167a327a

    • SSDEEP

      3072:bB4FJDDTw6EVSp0ydsKA/QcbM7f5CGg4I7DA5a/c2AHJyWza9q4iuOneRLaZmqQV:bBqDDs6asU7DA5F2Cyt9DGeRLaZmqsDJ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks