Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-sfrqmayqv3

  • MD5

    417d59e4b342431a6995d71957b06f28

  • SHA1

    6b5503229398752a8b40af7515ca6dd00768d153

  • SHA256

    5e8d75ee062d71cd88fbb770398ad01232e13850b5ceb565452247c95cc3dd98

  • SHA512

    884ecb113ef000f06c7a815536b03c982472b202bd3d65db05d7f45aba4d406dc9bcda8443838c26e8ce68fb8f451ef87e75fbfba003968c6a3418bb9f0a7e9f

  • SSDEEP

    1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfhwScrHOR:/7DhdC6kzWypvaQ0FxyNTBfhRcri

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      417d59e4b342431a6995d71957b06f28

    • SHA1

      6b5503229398752a8b40af7515ca6dd00768d153

    • SHA256

      5e8d75ee062d71cd88fbb770398ad01232e13850b5ceb565452247c95cc3dd98

    • SHA512

      884ecb113ef000f06c7a815536b03c982472b202bd3d65db05d7f45aba4d406dc9bcda8443838c26e8ce68fb8f451ef87e75fbfba003968c6a3418bb9f0a7e9f

    • SSDEEP

      1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfhwScrHOR:/7DhdC6kzWypvaQ0FxyNTBfhRcri

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks