Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    77d0ef49a35c093be3e115bd25551860N.exe

  • Size

    299KB

  • Sample

    240913-dwdflssblg

  • MD5

    77d0ef49a35c093be3e115bd25551860

  • SHA1

    5b6f55d5565e65355cbccb87a131a18865731ba9

  • SHA256

    fb7a18f8a1cc2ba63fec0bd263c0bee75ce2ffa8b16c8649fdb630345d2fde8b

  • SHA512

    82172479f3f6160b001855b733507c40ff4e97878cef75c36a6a98fb1ed9e55bebd0e12da12a30a7112340bff76177610587a9af101ec82069bfe85cf211f95b

  • SSDEEP

    6144:L+k5XLaJbcplKJmxOYO3rLPFE2NJOdK/wmAQQQQQQQQQQQQQQQQQQQQQQQQQQQQz:t+JbMJqfFE27P90

Malware Config

Targets

    • Target

      77d0ef49a35c093be3e115bd25551860N.exe

    • Size

      299KB

    • MD5

      77d0ef49a35c093be3e115bd25551860

    • SHA1

      5b6f55d5565e65355cbccb87a131a18865731ba9

    • SHA256

      fb7a18f8a1cc2ba63fec0bd263c0bee75ce2ffa8b16c8649fdb630345d2fde8b

    • SHA512

      82172479f3f6160b001855b733507c40ff4e97878cef75c36a6a98fb1ed9e55bebd0e12da12a30a7112340bff76177610587a9af101ec82069bfe85cf211f95b

    • SSDEEP

      6144:L+k5XLaJbcplKJmxOYO3rLPFE2NJOdK/wmAQQQQQQQQQQQQQQQQQQQQQQQQQQQQz:t+JbMJqfFE27P90

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks