Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-sp4fsayr14

  • MD5

    dcf416f9becda3e83d80b808906c68d3

  • SHA1

    29f9377f467bd5b6223316f6ea84e4c334515df6

  • SHA256

    ee3745dd28fd195213141696a2e7dc17969dc30f38184435ebc3056f5a9e7f87

  • SHA512

    afc632c1de34db1b801adf908241dd79e0e2abb8dfaa192f459f91e6d8786a6b055715031526348d30a2f0a5ee86fdf6d07fee861e06329304ced171a591f380

  • SSDEEP

    1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfKw7YfV/OV:/7DhdC6kzWypvaQ0FxyNTBfKO

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      dcf416f9becda3e83d80b808906c68d3

    • SHA1

      29f9377f467bd5b6223316f6ea84e4c334515df6

    • SHA256

      ee3745dd28fd195213141696a2e7dc17969dc30f38184435ebc3056f5a9e7f87

    • SHA512

      afc632c1de34db1b801adf908241dd79e0e2abb8dfaa192f459f91e6d8786a6b055715031526348d30a2f0a5ee86fdf6d07fee861e06329304ced171a591f380

    • SSDEEP

      1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfKw7YfV/OV:/7DhdC6kzWypvaQ0FxyNTBfKO

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks