Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    PlanetFN Free Perm Unban.exe

  • Size

    447KB

  • Sample

    240328-3n2kxacd35

  • MD5

    459b99520b03cad64aba09a3c71be442

  • SHA1

    9bb3f082a6511244f84a3410a7dde1f16c857d0d

  • SHA256

    54650d4fc30f4740bb67502b895df28ea6eeff69974b304672cfae2c3fa59a5a

  • SHA512

    44da45dddf86ed6d70c57cfc0b19ca46e1eb49b595c1580166200c1d8101f4fd7a48a3cdde009185986bec37767b6c3fd64dc1a05c809c8490a9f638a1d533c6

  • SSDEEP

    6144:3gGj1d8glYt7m7fSbVJ/Jp2QtvrVY+OeuY/Z4Q5ETuZz891gDqRMF9:wQ4nsfSnJp2QtjVYNeRZ1HvYG

Score
8/10

Malware Config

Targets

    • Target

      PlanetFN Free Perm Unban.exe

    • Size

      447KB

    • MD5

      459b99520b03cad64aba09a3c71be442

    • SHA1

      9bb3f082a6511244f84a3410a7dde1f16c857d0d

    • SHA256

      54650d4fc30f4740bb67502b895df28ea6eeff69974b304672cfae2c3fa59a5a

    • SHA512

      44da45dddf86ed6d70c57cfc0b19ca46e1eb49b595c1580166200c1d8101f4fd7a48a3cdde009185986bec37767b6c3fd64dc1a05c809c8490a9f638a1d533c6

    • SSDEEP

      6144:3gGj1d8glYt7m7fSbVJ/Jp2QtvrVY+OeuY/Z4Q5ETuZz891gDqRMF9:wQ4nsfSnJp2QtjVYNeRZ1HvYG

    Score
    8/10
    • Blocklisted process makes network request

    • Stops running service(s)

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks