Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Flarenew.exe

  • Size

    91KB

  • Sample

    250326-ssrw6axwbx

  • MD5

    cc781da6668d36fd69268355a98acfcc

  • SHA1

    e517879b4017a82cb229ae8c3696e9c574b0e351

  • SHA256

    8ad988358df106e54c497704f229ca6ce1092d6fc4632b2fb6b9fe300a3d7b18

  • SHA512

    524967733b621ec16e29164c7000b0e1173e45423036d162edff6ade349da265aaf46bd12052aee53271df48f7242c6956a5c004d53d7274b8d93618ab508166

  • SSDEEP

    1536:X7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfAwt8O4:L7DhdC6kzWypvaQ0FxyNTBfAWY

Malware Config

Targets

    • Target

      Flarenew.exe

    • Size

      91KB

    • MD5

      cc781da6668d36fd69268355a98acfcc

    • SHA1

      e517879b4017a82cb229ae8c3696e9c574b0e351

    • SHA256

      8ad988358df106e54c497704f229ca6ce1092d6fc4632b2fb6b9fe300a3d7b18

    • SHA512

      524967733b621ec16e29164c7000b0e1173e45423036d162edff6ade349da265aaf46bd12052aee53271df48f7242c6956a5c004d53d7274b8d93618ab508166

    • SSDEEP

      1536:X7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfAwt8O4:L7DhdC6kzWypvaQ0FxyNTBfAWY

    • Possible privilege escalation attempt

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Drops startup file

    • Modifies file permissions

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks