Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    teur4.exe

  • Size

    615KB

  • Sample

    240907-fta9kswepq

  • MD5

    b3e46b8cbe83d0e6002173c37e8436a7

  • SHA1

    de994b98fac3f9499ee15c3ccf859ef05db14b62

  • SHA256

    35f20c8ae6e9990812b6ccf20321af32662bcf76d8c27a800f086255911bfb6b

  • SHA512

    5f9a07740d76c9407160029655a9b66a50e136b63abd071c79106d2339b6951c28397f441cec7c99d968706ed7bd4e01288459bf22e0489fca646eccf0dc57f8

  • SSDEEP

    12288:3Ui+Sybja8AwVReTD7oB++4clgVY3fYNKfPTksjUTyKJrVSo5flO9dJu:3KSybm8AaRiE+wy2PYNCQIWVd5cw

Score
7/10

Malware Config

Targets

    • Target

      teur4.exe

    • Size

      615KB

    • MD5

      b3e46b8cbe83d0e6002173c37e8436a7

    • SHA1

      de994b98fac3f9499ee15c3ccf859ef05db14b62

    • SHA256

      35f20c8ae6e9990812b6ccf20321af32662bcf76d8c27a800f086255911bfb6b

    • SHA512

      5f9a07740d76c9407160029655a9b66a50e136b63abd071c79106d2339b6951c28397f441cec7c99d968706ed7bd4e01288459bf22e0489fca646eccf0dc57f8

    • SSDEEP

      12288:3Ui+Sybja8AwVReTD7oB++4clgVY3fYNKfPTksjUTyKJrVSo5flO9dJu:3KSybm8AaRiE+wy2PYNCQIWVd5cw

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks