Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-slfwbayrs4

  • MD5

    1a137b783a1a39509329236672fe24cc

  • SHA1

    f6ecd8fb3f52fe31c357b2c2a23a68aa0a0989a7

  • SHA256

    99c985b3b072b5a1a793187cef71c494c6c4e9b963e77c0c3fcbaca46329c002

  • SHA512

    a9a79f413df02f331177f3833424f48e29edf0f95dbffc0e9f03d5b371d92f60e41f00d12a9667a11e5ca9f80548b4d127fec11862e869b512ab938bdd1f3d72

  • SSDEEP

    1536:L7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIf0wUEOE:H7DhdC6kzWypvaQ0FxyNTBf0n8

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      1a137b783a1a39509329236672fe24cc

    • SHA1

      f6ecd8fb3f52fe31c357b2c2a23a68aa0a0989a7

    • SHA256

      99c985b3b072b5a1a793187cef71c494c6c4e9b963e77c0c3fcbaca46329c002

    • SHA512

      a9a79f413df02f331177f3833424f48e29edf0f95dbffc0e9f03d5b371d92f60e41f00d12a9667a11e5ca9f80548b4d127fec11862e869b512ab938bdd1f3d72

    • SSDEEP

      1536:L7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIf0wUEOE:H7DhdC6kzWypvaQ0FxyNTBf0n8

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks