Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-snwdsaxvcy

  • MD5

    cc62e07613c3d5a64deeec263f90203f

  • SHA1

    29b3b3a3dd3b9fc29557b1f143c9a8ff8e0f803b

  • SHA256

    25b5c5c60d60808e953ac7a931839fc5807233532e90e47b950c3aad0f3ed03a

  • SHA512

    bab0d67020aedf4cfa1571a970ad2ae2e959e625f9d527abab3ab346da12875ce8e5e753b5913946d5766f03aafd19e93caa4db3975c4facb21602473ae55fd2

  • SSDEEP

    1536:D7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfPwgOU:f7DhdC6kzWypvaQ0FxyNTBfPV

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      cc62e07613c3d5a64deeec263f90203f

    • SHA1

      29b3b3a3dd3b9fc29557b1f143c9a8ff8e0f803b

    • SHA256

      25b5c5c60d60808e953ac7a931839fc5807233532e90e47b950c3aad0f3ed03a

    • SHA512

      bab0d67020aedf4cfa1571a970ad2ae2e959e625f9d527abab3ab346da12875ce8e5e753b5913946d5766f03aafd19e93caa4db3975c4facb21602473ae55fd2

    • SSDEEP

      1536:D7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfPwgOU:f7DhdC6kzWypvaQ0FxyNTBfPV

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks