Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f0d18717841c0907a304667d6a0c1beebcd91a820c25067cdd899591ead59efa

  • Size

    12.2MB

  • Sample

    240626-bs2mxswdje

  • MD5

    175731a6e42f8b20b23cce660a8ec4ad

  • SHA1

    99cfbe7d8178cac8c015393d68026b464ac791da

  • SHA256

    f0d18717841c0907a304667d6a0c1beebcd91a820c25067cdd899591ead59efa

  • SHA512

    d65c91b0bde0c0673e80dcec29b75df33ab9384b9a8ec70d3def68080155ba2e7958182015afe53695eeecf514ad1db59ceec1ae115be967e8563b5c5d61f9e6

  • SSDEEP

    98304:iws2ANnKXOaeOgmhZnBUl990lpUK/CQsyHHVwKt0C4APi+nIQbEooKidtyJBAUZA:4KXbeO7zA8QsnSi4w9nIIEHdoJVQ+O

Malware Config

Targets

    • Target

      f0d18717841c0907a304667d6a0c1beebcd91a820c25067cdd899591ead59efa

    • Size

      12.2MB

    • MD5

      175731a6e42f8b20b23cce660a8ec4ad

    • SHA1

      99cfbe7d8178cac8c015393d68026b464ac791da

    • SHA256

      f0d18717841c0907a304667d6a0c1beebcd91a820c25067cdd899591ead59efa

    • SHA512

      d65c91b0bde0c0673e80dcec29b75df33ab9384b9a8ec70d3def68080155ba2e7958182015afe53695eeecf514ad1db59ceec1ae115be967e8563b5c5d61f9e6

    • SSDEEP

      98304:iws2ANnKXOaeOgmhZnBUl990lpUK/CQsyHHVwKt0C4APi+nIQbEooKidtyJBAUZA:4KXbeO7zA8QsnSi4w9nIIEHdoJVQ+O

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

    • Sets service image path in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.