Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06022025_1459_05022025_DHL Takip-pdf.7z

  • Size

    1009KB

  • Sample

    250206-sc399axrgs

  • MD5

    ad0d8134031dc367dc0d8b016635c92c

  • SHA1

    54e401964312e396d3fe698bb6d7b846a28ac34e

  • SHA256

    f56b71aa51f5592b7dccb011ce108f898fd911d4e58d0d32e519d80f5d182963

  • SHA512

    7ebd94ce3af8ec4bbd1252e4b8f9928c98b487a4d70826228226a83334f97c7b6b8d66431b23a65c1fa7addb18d66a2774b55038a1555e43d7905bf8bc85980f

  • SSDEEP

    24576:pz019eeA3refAtexCXzC2OSkATU4f/YIYBYZdV:d019eecr0FCXzVpNAAwPC1

Malware Config

Targets

    • Target

      DHL Takip-pdf.bat

    • Size

      1.0MB

    • MD5

      62fed8d2f8c74245e366b5ffc4170325

    • SHA1

      c9ad60cf5921d12fed075927b4cf4623d129a671

    • SHA256

      2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6

    • SHA512

      3dd9b6dba45b75f39a6430fa0a6471dbda9b42cea021b37faefd72eb00fc3886b038afb88b51d9dfd6e313e5cdf07fdc33a026b827d3037dcd291e3d2316d714

    • SSDEEP

      24576:+5TSjeuARbeLYMexXYvRCEOYkYRU2fNYwYtYPY:+kjeu0bx5ovRH1bqyuXOg

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      cf85183b87314359488b850f9e97a698

    • SHA1

      6b6c790037eec7ebea4d05590359cb4473f19aea

    • SHA256

      3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac

    • SHA512

      fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b

    • SSDEEP

      96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks