Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e3b090f044833c0e9328593357138a307bcf2ce0ab4badc3fd766b83beb4af1b.exe

  • Size

    332KB

  • Sample

    240511-cescrsfa61

  • MD5

    93ed4d71925bf64cc42cc9dd295d0394

  • SHA1

    bb1feb06a69b108e103435bb5b498aab3c7315af

  • SHA256

    e3b090f044833c0e9328593357138a307bcf2ce0ab4badc3fd766b83beb4af1b

  • SHA512

    88a9d09fd2ba60f051bc86bf4c7dad87acbca6348e7380e21d635665aeaf7231842a7bd5f2b729bc93221bd6aa391e893f6f53d2c575aeadf512617b0d423f8e

  • SSDEEP

    6144:EYa6EIIIIBDs7abo+8dlqp5PhyOH+lMkMPHTEJp7eOm9t1t7N1e:EYCw+bl5ZyOelMLLEJE19tP7N4

Score
7/10

Malware Config

Targets

    • Target

      e3b090f044833c0e9328593357138a307bcf2ce0ab4badc3fd766b83beb4af1b.exe

    • Size

      332KB

    • MD5

      93ed4d71925bf64cc42cc9dd295d0394

    • SHA1

      bb1feb06a69b108e103435bb5b498aab3c7315af

    • SHA256

      e3b090f044833c0e9328593357138a307bcf2ce0ab4badc3fd766b83beb4af1b

    • SHA512

      88a9d09fd2ba60f051bc86bf4c7dad87acbca6348e7380e21d635665aeaf7231842a7bd5f2b729bc93221bd6aa391e893f6f53d2c575aeadf512617b0d423f8e

    • SSDEEP

      6144:EYa6EIIIIBDs7abo+8dlqp5PhyOH+lMkMPHTEJp7eOm9t1t7N1e:EYCw+bl5ZyOelMLLEJE19tP7N4

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks