Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cb8a3b3334911d0e1f927b1571c2872e93c888d64bf416eb9713b5bfc165ee0d

  • Size

    1.4MB

  • Sample

    241001-ftqn9swdrf

  • MD5

    e5f2bd9416302de2c778508dabfaa389

  • SHA1

    8981a87d9844a85379476f92ca3019750ada36e0

  • SHA256

    cb8a3b3334911d0e1f927b1571c2872e93c888d64bf416eb9713b5bfc165ee0d

  • SHA512

    1cde375a8364284412b599f4a65a067138f7412d2671fa83c460877d1e8dca47a13c10507a31d3516face67e403f2cef03456daebb788b044d5696390b1f4b66

  • SSDEEP

    24576:o+JZpuIwJi1PTMrc0zEzpUH/bZxa4YEdSf1aXVE21sWVFfN:VwyTVAEzpUH/bjHYEdA1avs+FfN

Score
10/10

Malware Config

Targets

    • Target

      quote prices.exe

    • Size

      2.7MB

    • MD5

      ebfef9cceabb8b7bae8fdd6da82818fb

    • SHA1

      c434ac40f3a456f849a440001e0fdcae583f8eaa

    • SHA256

      1dec2eb916877caf3b3fb23330de8cba38ba9bf743de5b72d0c7db5bf01f308c

    • SHA512

      11fa839b9b4eab890cba026ea1cb9a928556da31da77460665e6146b25f84b9a001772f29b6ca3cb05899199e9d40d66126d4fed55eb4e122cd44e434c178f4d

    • SSDEEP

      24576:WXbWGsSH8HfTn2McGGn2Gc89Jd46bV8YYDYDVBfzd7peh+cjZUYg+9Auof0AB:

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks