Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753

  • Size

    10.7MB

  • Sample

    241005-scg21svhjp

  • MD5

    56336f2506c6bcf93b172b9d75f70b12

  • SHA1

    b51437c82322d3a1b4ac8b185ddb3708393e31a8

  • SHA256

    bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753

  • SHA512

    de3129fb5fb9dfcb423a38f76c8e8b42c6dac1f6fa55c2a0ed336bec066e68c4c6e2c47af777cd63edbb919cb7f967475bd53b59ead1413ed19a2676913af3cd

  • SSDEEP

    196608:6GgEIGCNGJSn4+rsivKB+o3pUv56toYB5beoCkiTbhaTub8VIH6Op7tq:6GQdNG4is56tjBleoCkIh38VIdZs

Malware Config

Targets

    • Target

      bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753

    • Size

      10.7MB

    • MD5

      56336f2506c6bcf93b172b9d75f70b12

    • SHA1

      b51437c82322d3a1b4ac8b185ddb3708393e31a8

    • SHA256

      bf2ec6066fe6f0a38d6d5d1c67a401952d73aee4250dc1af8a604b73c7055753

    • SHA512

      de3129fb5fb9dfcb423a38f76c8e8b42c6dac1f6fa55c2a0ed336bec066e68c4c6e2c47af777cd63edbb919cb7f967475bd53b59ead1413ed19a2676913af3cd

    • SSDEEP

      196608:6GgEIGCNGJSn4+rsivKB+o3pUv56toYB5beoCkiTbhaTub8VIH6Op7tq:6GQdNG4is56tjBleoCkIh38VIdZs

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks