Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171N

  • Size

    2.3MB

  • Sample

    240928-vfjfcsyfqa

  • MD5

    3acf0f8250e73855a38a3391f6839300

  • SHA1

    303df2cf9b94808dae96640115b9fa55c30f9637

  • SHA256

    f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171

  • SHA512

    8b70668c1bbb0d624836f50a3d61c951eeae4376ef99b410731f8b3d7debf29340caa6aa4260b81b220a97943311238e233eaf204cb4052c9e9106bf48bb576e

  • SSDEEP

    49152:3jvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:3rkI9rSjA5aDo73pzF2bz3p9y4HgIoov

Malware Config

Targets

    • Target

      f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171N

    • Size

      2.3MB

    • MD5

      3acf0f8250e73855a38a3391f6839300

    • SHA1

      303df2cf9b94808dae96640115b9fa55c30f9637

    • SHA256

      f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171

    • SHA512

      8b70668c1bbb0d624836f50a3d61c951eeae4376ef99b410731f8b3d7debf29340caa6aa4260b81b220a97943311238e233eaf204cb4052c9e9106bf48bb576e

    • SSDEEP

      49152:3jvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:3rkI9rSjA5aDo73pzF2bz3p9y4HgIoov

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks