Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    clients.exe

  • Size

    8.1MB

  • Sample

    240703-xxtnrstelq

  • MD5

    abdbc76ef5a30a8d16301ff4e4cda36f

  • SHA1

    bcc63fb4e5b18a11103fc052c306b966af106c58

  • SHA256

    7a97e821e687d04bc86dc5e98264b42c6e8fbe746647f8bfa5962975bc3020ef

  • SHA512

    93b487744810c8e0399e59ccd03744d34b42dad6763978c8068aa08a65a6ca573544eef3c787166bb4ac84d33bdd59fe3696cb00356cdbed46019616ff9dadb6

  • SSDEEP

    196608:C3KAfhwuLIoBA1HeT39IigQh1ncKOVVtk7cHtQ1NQPp4U:CJaIq1+TtIiLv0VQ26ul

Malware Config

Targets

    • Target

      clients.exe

    • Size

      8.1MB

    • MD5

      abdbc76ef5a30a8d16301ff4e4cda36f

    • SHA1

      bcc63fb4e5b18a11103fc052c306b966af106c58

    • SHA256

      7a97e821e687d04bc86dc5e98264b42c6e8fbe746647f8bfa5962975bc3020ef

    • SHA512

      93b487744810c8e0399e59ccd03744d34b42dad6763978c8068aa08a65a6ca573544eef3c787166bb4ac84d33bdd59fe3696cb00356cdbed46019616ff9dadb6

    • SSDEEP

      196608:C3KAfhwuLIoBA1HeT39IigQh1ncKOVVtk7cHtQ1NQPp4U:CJaIq1+TtIiLv0VQ26ul

    Score
    9/10
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks