Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    29d43a2fb4933ef88ad110cd73f7096e537471a3bf2a5bfd9d8752100f8102f7N.exe

  • Size

    465KB

  • Sample

    250125-gphnja1jbn

  • MD5

    71c7fbd5bcceeb2500fb84c226fb86e0

  • SHA1

    fd56b39e5ca50efc6e1d06752f1ee534f4ff1c08

  • SHA256

    29d43a2fb4933ef88ad110cd73f7096e537471a3bf2a5bfd9d8752100f8102f7

  • SHA512

    d2781234fa510749c85b948626fdf38bbe7cae94aa8966a9435aaab0dc365be282525a5e7559a1859c7f536b5e4c63e15320bc1e550c37dd094ea089e1ec23d6

  • SSDEEP

    12288:5uJusUSao217d8jG3+kR5LFpyxNWBjvrEH7qf:5uc4ao21udkHFpYarEH7C

Malware Config

Targets

    • Target

      29d43a2fb4933ef88ad110cd73f7096e537471a3bf2a5bfd9d8752100f8102f7N.exe

    • Size

      465KB

    • MD5

      71c7fbd5bcceeb2500fb84c226fb86e0

    • SHA1

      fd56b39e5ca50efc6e1d06752f1ee534f4ff1c08

    • SHA256

      29d43a2fb4933ef88ad110cd73f7096e537471a3bf2a5bfd9d8752100f8102f7

    • SHA512

      d2781234fa510749c85b948626fdf38bbe7cae94aa8966a9435aaab0dc365be282525a5e7559a1859c7f536b5e4c63e15320bc1e550c37dd094ea089e1ec23d6

    • SSDEEP

      12288:5uJusUSao217d8jG3+kR5LFpyxNWBjvrEH7qf:5uc4ao21udkHFpYarEH7C

    • Floxif family

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

    • Detects Floxif payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks