Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

09/03/2025, 09:08

250309-k31m2szkx5 1

09/03/2025, 08:57

250309-kw35lazsgv 10

09/03/2025, 08:35

250309-khevvazjx3 10

09/03/2025, 08:28

250309-kc7cxazjv3 8

General

  • Target

    sample

  • Size

    218KB

  • Sample

    250309-kw35lazsgv

  • MD5

    3f06b47847759782317c7542e1b2c761

  • SHA1

    71880ad118b1e577fcc6839a6906b739dfe03c23

  • SHA256

    da4cc1b53a91259c68033e08d90e4bbef47df7ae48369a6b86e1f2de4d753932

  • SHA512

    6d68c779d7cb118a19917d083538fecdbdf29d8886cb8eb31436e2bf6cb1ce76de35ca496cbebc80505ee34e818a6bbed223e7540079c42553b3962c33f568eb

  • SSDEEP

    1536:34Edd0E6RJNvZO+uzA+QmMJUDmidraCOljmFSwP6AhUdcC/cl2h7ZBog3B:HbDmU5yPKg3B

Score
10/10

Malware Config

Targets

    • Target

      sample

    • Size

      218KB

    • MD5

      3f06b47847759782317c7542e1b2c761

    • SHA1

      71880ad118b1e577fcc6839a6906b739dfe03c23

    • SHA256

      da4cc1b53a91259c68033e08d90e4bbef47df7ae48369a6b86e1f2de4d753932

    • SHA512

      6d68c779d7cb118a19917d083538fecdbdf29d8886cb8eb31436e2bf6cb1ce76de35ca496cbebc80505ee34e818a6bbed223e7540079c42553b3962c33f568eb

    • SSDEEP

      1536:34Edd0E6RJNvZO+uzA+QmMJUDmidraCOljmFSwP6AhUdcC/cl2h7ZBog3B:HbDmU5yPKg3B

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks