Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf1a229251a53ea742dcb19277d949386fad6786e7efaf8a3e4a30a198b8ef28N

  • Size

    119KB

  • Sample

    241015-hbqyeszdpe

  • MD5

    308db8ccf78842e1c0138471dbc8f420

  • SHA1

    8fe9af4847dcdfd61f320cd66133299e84f7f04f

  • SHA256

    bf1a229251a53ea742dcb19277d949386fad6786e7efaf8a3e4a30a198b8ef28

  • SHA512

    aad374c61ffc0b4fc888a8f1bcf2ec976d5763cb458e69d93722b2da1aeaa0431dbbc89cda483d64cf9762dcfe15580312e7ed84043c41042ae4a39142ec8c4c

  • SSDEEP

    3072:ZOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPh:ZIs9OKofHfHTXQLzgvnzHPowYbvrjD/E

Malware Config

Targets

    • Target

      bf1a229251a53ea742dcb19277d949386fad6786e7efaf8a3e4a30a198b8ef28N

    • Size

      119KB

    • MD5

      308db8ccf78842e1c0138471dbc8f420

    • SHA1

      8fe9af4847dcdfd61f320cd66133299e84f7f04f

    • SHA256

      bf1a229251a53ea742dcb19277d949386fad6786e7efaf8a3e4a30a198b8ef28

    • SHA512

      aad374c61ffc0b4fc888a8f1bcf2ec976d5763cb458e69d93722b2da1aeaa0431dbbc89cda483d64cf9762dcfe15580312e7ed84043c41042ae4a39142ec8c4c

    • SSDEEP

      3072:ZOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPh:ZIs9OKofHfHTXQLzgvnzHPowYbvrjD/E

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks