Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fd115e2d35992b59fb62f89b59437b5284a4d9fcb3fc0974c1dd6b56b37de509.exe

  • Size

    633KB

  • Sample

    240607-drnqsagg7v

  • MD5

    a04b2a0df1ed1d4d23b5f511b05db42c

  • SHA1

    3564d3ebe7861d9d6be4be7945577669548832f5

  • SHA256

    fd115e2d35992b59fb62f89b59437b5284a4d9fcb3fc0974c1dd6b56b37de509

  • SHA512

    7d5b5bc9e59473b010c4e86d7439a50ddc2688e30c5005c09f42e4d2825e373a6e565824f1cb94b98b1106a78746fe9ade57485c77aa890296f84528553eaeee

  • SSDEEP

    12288:5gWUQKFHJW2PnAbDKZXVrsa238hsSGL1b+AiqYNC+gwoFuJ5QPPbwHo:1Kxw2IXWFrsaJhsSGLJ+pNf9osQPb

Score
8/10

Malware Config

Targets

    • Target

      fd115e2d35992b59fb62f89b59437b5284a4d9fcb3fc0974c1dd6b56b37de509.exe

    • Size

      633KB

    • MD5

      a04b2a0df1ed1d4d23b5f511b05db42c

    • SHA1

      3564d3ebe7861d9d6be4be7945577669548832f5

    • SHA256

      fd115e2d35992b59fb62f89b59437b5284a4d9fcb3fc0974c1dd6b56b37de509

    • SHA512

      7d5b5bc9e59473b010c4e86d7439a50ddc2688e30c5005c09f42e4d2825e373a6e565824f1cb94b98b1106a78746fe9ade57485c77aa890296f84528553eaeee

    • SSDEEP

      12288:5gWUQKFHJW2PnAbDKZXVrsa238hsSGL1b+AiqYNC+gwoFuJ5QPPbwHo:1Kxw2IXWFrsaJhsSGLJ+pNf9osQPb

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks