Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    lb.exe

  • Size

    35.9MB

  • Sample

    240710-yqc8waxcln

  • MD5

    0d44da7e57577fa226fc3003c314a548

  • SHA1

    43e96ccf4dcd34bb111be76ecedf50a61fa9e493

  • SHA256

    fcd2812900ec1574724d3cef7979cdc66df3473aaf6a85046d2bcbf40f36de71

  • SHA512

    38667f96441d3629fe1584653925259f662d80138907db76cad68d858ef3e9ab8cb61d0477050bef1b471c017c19ae75432b91a90e7e33a81e9a8bd23a52cdd7

  • SSDEEP

    393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfS:fMguj8Q4VfvdqFTrYB

Score
8/10

Malware Config

Targets

    • Target

      lb.exe

    • Size

      35.9MB

    • MD5

      0d44da7e57577fa226fc3003c314a548

    • SHA1

      43e96ccf4dcd34bb111be76ecedf50a61fa9e493

    • SHA256

      fcd2812900ec1574724d3cef7979cdc66df3473aaf6a85046d2bcbf40f36de71

    • SHA512

      38667f96441d3629fe1584653925259f662d80138907db76cad68d858ef3e9ab8cb61d0477050bef1b471c017c19ae75432b91a90e7e33a81e9a8bd23a52cdd7

    • SSDEEP

      393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfS:fMguj8Q4VfvdqFTrYB

    Score
    8/10
    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks