Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    79bc606635b68e84d804a2337c0998e9689cf4c02f3f3eca977d5e4749efcd27

  • Size

    503KB

  • Sample

    240808-2wkrpa1hpk

  • MD5

    ed09b192ac289941a207b8d157b3a497

  • SHA1

    a543172a6429a632912bfe759624a1666ec12cc6

  • SHA256

    79bc606635b68e84d804a2337c0998e9689cf4c02f3f3eca977d5e4749efcd27

  • SHA512

    620dc546999ce98f55777b45bc87c2b0bcbbc31f3dfd18eaad0754a6c1ee1fedd6c58b6838fed6fecdfdaebd5b8c44c8b95cf654e10517c1016122a58dac1d5a

  • SSDEEP

    12288:uSCeuqF7Ev7bKeTIfX4Armt5q9vonshRLermBzTBjvrEH7S:hC5U7Ev7brIgAKConshRvBzJrEH7S

Malware Config

Targets

    • Target

      79bc606635b68e84d804a2337c0998e9689cf4c02f3f3eca977d5e4749efcd27

    • Size

      503KB

    • MD5

      ed09b192ac289941a207b8d157b3a497

    • SHA1

      a543172a6429a632912bfe759624a1666ec12cc6

    • SHA256

      79bc606635b68e84d804a2337c0998e9689cf4c02f3f3eca977d5e4749efcd27

    • SHA512

      620dc546999ce98f55777b45bc87c2b0bcbbc31f3dfd18eaad0754a6c1ee1fedd6c58b6838fed6fecdfdaebd5b8c44c8b95cf654e10517c1016122a58dac1d5a

    • SSDEEP

      12288:uSCeuqF7Ev7bKeTIfX4Armt5q9vonshRLermBzTBjvrEH7S:hC5U7Ev7brIgAKConshRvBzJrEH7S

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks