Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    88f9977bcf2e69bfae14a36a9b12c1a3ab14ac8de5c42cf27dc61d1a717d5a05.exe

  • Size

    710KB

  • Sample

    250326-s4wpgsxybt

  • MD5

    7fd7dd397e516148853d67da226421ee

  • SHA1

    dd29f965861e967717619c3430642e508aefda76

  • SHA256

    88f9977bcf2e69bfae14a36a9b12c1a3ab14ac8de5c42cf27dc61d1a717d5a05

  • SHA512

    d33e3cb5cf12ae987f04319dc55c1e082504c3dd2741531fb087133a3c5e64fef7ed3117474554533ef198021313ec6e550ea8997aae225efedc82ff384d04e4

  • SSDEEP

    12288:K/fYDG1Q4p14mNq+/FppPh9JGF7eTN+NFbl5Pj0spM86:+fGoQff+/FpdKOMzxjJ

Malware Config

Targets

    • Target

      88f9977bcf2e69bfae14a36a9b12c1a3ab14ac8de5c42cf27dc61d1a717d5a05.exe

    • Size

      710KB

    • MD5

      7fd7dd397e516148853d67da226421ee

    • SHA1

      dd29f965861e967717619c3430642e508aefda76

    • SHA256

      88f9977bcf2e69bfae14a36a9b12c1a3ab14ac8de5c42cf27dc61d1a717d5a05

    • SHA512

      d33e3cb5cf12ae987f04319dc55c1e082504c3dd2741531fb087133a3c5e64fef7ed3117474554533ef198021313ec6e550ea8997aae225efedc82ff384d04e4

    • SSDEEP

      12288:K/fYDG1Q4p14mNq+/FppPh9JGF7eTN+NFbl5Pj0spM86:+fGoQff+/FpdKOMzxjJ

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8b3830b9dbf87f84ddd3b26645fed3a0

    • SHA1

      223bef1f19e644a610a0877d01eadc9e28299509

    • SHA256

      f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37

    • SHA512

      d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03

    • SSDEEP

      192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks