Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6ce6e0ef7ee8184931042f8f3fe634ac.bin

  • Size

    309KB

  • Sample

    240726-c17pkstgne

  • MD5

    6ce6e0ef7ee8184931042f8f3fe634ac

  • SHA1

    6a9667b88586a6cbcb22f271afa47f601744d1fb

  • SHA256

    724d60add175b7d8d21541dd306cfcd1b737c756f19ca74220139e13f5256a06

  • SHA512

    84d6044b4ba041b1db984ba1b2ea163edb2620c932a3295838d1adb50340e160e4e3d96a3bba4d9fff95044e668adf3e05aea360d51ff3762360fbdd24e7b70e

  • SSDEEP

    6144:VwhzQ9Spr2I6jYZNp0H8vIz3YX5Sze2wpchpkUJ1HmBh4kHIJ:VrSn6jYQTKk9h1HmAJ

Malware Config

Targets

    • Target

      6ce6e0ef7ee8184931042f8f3fe634ac.bin

    • Size

      309KB

    • MD5

      6ce6e0ef7ee8184931042f8f3fe634ac

    • SHA1

      6a9667b88586a6cbcb22f271afa47f601744d1fb

    • SHA256

      724d60add175b7d8d21541dd306cfcd1b737c756f19ca74220139e13f5256a06

    • SHA512

      84d6044b4ba041b1db984ba1b2ea163edb2620c932a3295838d1adb50340e160e4e3d96a3bba4d9fff95044e668adf3e05aea360d51ff3762360fbdd24e7b70e

    • SSDEEP

      6144:VwhzQ9Spr2I6jYZNp0H8vIz3YX5Sze2wpchpkUJ1HmBh4kHIJ:VrSn6jYQTKk9h1HmAJ

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks