Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dl_scripts and new NmsSpt.zip

  • Size

    12.3MB

  • Sample

    240415-l25faabg43

  • MD5

    06ba9147799e5b81282306ec6b2934ca

  • SHA1

    d33c93cf78beafba84b6f145d17c48455c9c4f91

  • SHA256

    f492027c646554f4c1de3743c0719ca5877c9dd0403b11be685d0a1b7da163ce

  • SHA512

    d30bf7de6d7bdb87812d3fc8b8c9fe8e6983d3b567ebb4a31e7d112bf240ebf12c00cf1db2e9e71ae085b5e15623241174726547ead33f2192e55b5e9687ff6f

  • SSDEEP

    393216:yUiSo9UHyspWb19z+uCvtTZHwASkLQOZjcb:vdHy4W5lmftXne

Malware Config

Targets

    • Target

      dl_scripts and new NmsSpt.zip

    • Size

      12.3MB

    • MD5

      06ba9147799e5b81282306ec6b2934ca

    • SHA1

      d33c93cf78beafba84b6f145d17c48455c9c4f91

    • SHA256

      f492027c646554f4c1de3743c0719ca5877c9dd0403b11be685d0a1b7da163ce

    • SHA512

      d30bf7de6d7bdb87812d3fc8b8c9fe8e6983d3b567ebb4a31e7d112bf240ebf12c00cf1db2e9e71ae085b5e15623241174726547ead33f2192e55b5e9687ff6f

    • SSDEEP

      393216:yUiSo9UHyspWb19z+uCvtTZHwASkLQOZjcb:vdHy4W5lmftXne

    Score
    1/10
    • Target

      dl_scripts and new NmsSpt/nmsspt-1.1.0-win.amd64.setup.exe

    • Size

      10.9MB

    • MD5

      fd90f5774eb45ccb0a20ac3409cf7cb4

    • SHA1

      a3772ec4d377963862a8f3bd54f05035c5d47091

    • SHA256

      603da6519505a65526f1e6bef27fb7ef7b5e9a2926fb6e2257c0d1774da26e36

    • SHA512

      6d225f6f329e9667835afccf8c98a433bb6a3d72c9d9ee15425e3f0a0c7c9190654a74577eb13e08338212b371117cd02618f314237ac94309cfd13b54a5b3a1

    • SSDEEP

      196608:JSof1Uooys+cxWb1CARE013Zn+uCQSvK6TqiHwzAVM/CJkMVCO2NigfWXjcM:JSo9UHyspWb19z+uCvtTZHwASkLQOZj1

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks