Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-smq3nsxth1

  • MD5

    218b70372eba69f8c85c2c22d5c3256e

  • SHA1

    e77a0b4c000811ad7e733f781b9dc6fc83d6de33

  • SHA256

    d5f2027511bc056ca92ef08e24545a0374f7c0b6f7e6f629731ac57d99d54989

  • SHA512

    d230d49653bd8d5d87a55121628e33dbdc56037014ff1c5024c33a9ebfa1c672c0cc4adeef0ebf55b533b18e5d1f7b7d4c149308c38499ca267c1e0e4608ee65

  • SSDEEP

    1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfnw93Od:/7DhdC6kzWypvaQ0FxyNTBfnaW

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      218b70372eba69f8c85c2c22d5c3256e

    • SHA1

      e77a0b4c000811ad7e733f781b9dc6fc83d6de33

    • SHA256

      d5f2027511bc056ca92ef08e24545a0374f7c0b6f7e6f629731ac57d99d54989

    • SHA512

      d230d49653bd8d5d87a55121628e33dbdc56037014ff1c5024c33a9ebfa1c672c0cc4adeef0ebf55b533b18e5d1f7b7d4c149308c38499ca267c1e0e4608ee65

    • SSDEEP

      1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfnw93Od:/7DhdC6kzWypvaQ0FxyNTBfnaW

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks