Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Sigmanly_bf9b1fb1f7b689fb89ce8278aab22e89d4dd1bb889e1bf60d3b4bf591b40b5fd

  • Size

    918KB

  • Sample

    250326-ppfg6s1qw7

  • MD5

    61725da4f7825615b317de75818d8d54

  • SHA1

    0049128804aadb3513087ff4648b690947a0a030

  • SHA256

    bf9b1fb1f7b689fb89ce8278aab22e89d4dd1bb889e1bf60d3b4bf591b40b5fd

  • SHA512

    86b0d280f57acb8e0d0e5dce151bfac84f28c3656af205788e67bfc3303f413302563481913261edc11a3edb98bcb9af777f3db1d1d548289b70630d598f3793

  • SSDEEP

    24576:Cx04+OcBVME/7oHMkwTxRqs3lyA4WkBbzrkW:Cx044Br76wXqqoj

Malware Config

Targets

    • Target

      Sigmanly_bf9b1fb1f7b689fb89ce8278aab22e89d4dd1bb889e1bf60d3b4bf591b40b5fd

    • Size

      918KB

    • MD5

      61725da4f7825615b317de75818d8d54

    • SHA1

      0049128804aadb3513087ff4648b690947a0a030

    • SHA256

      bf9b1fb1f7b689fb89ce8278aab22e89d4dd1bb889e1bf60d3b4bf591b40b5fd

    • SHA512

      86b0d280f57acb8e0d0e5dce151bfac84f28c3656af205788e67bfc3303f413302563481913261edc11a3edb98bcb9af777f3db1d1d548289b70630d598f3793

    • SSDEEP

      24576:Cx04+OcBVME/7oHMkwTxRqs3lyA4WkBbzrkW:Cx044Br76wXqqoj

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      a436db0c473a087eb61ff5c53c34ba27

    • SHA1

      65ea67e424e75f5065132b539c8b2eda88aa0506

    • SHA256

      75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49

    • SHA512

      908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d

    • SSDEEP

      192:aVL7iZJX76BisO7+UZEw+Rl59pV8ghsVJ39dx8T:d7NsOpZsfLMJ39e

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks