Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    801acd1c8e0280b31e28c726f6b427a4.exe

  • Size

    363KB

  • Sample

    221016-ztvsrsacd5

  • MD5

    801acd1c8e0280b31e28c726f6b427a4

  • SHA1

    d83262e6081da951918dfa5121814bb82e95a269

  • SHA256

    67d15967c6afc53889aa22cad18fd6afccff7a4e513e218478f882fb01824dd4

  • SHA512

    39aad4426232681419d5d15ce061767fff5b2d3b25076ebe07a2cb0c6593b75dfb44d91e2ecc40dfde7ef1b8e9b643c25c22feaa89807ca9cd476f1a76782dae

  • SSDEEP

    3072:vWlhCuAo4LsUokIau9UUsnz+NSMfD9H5+EKj:ulhCuF4LTu9xsniNS4Dr8

Score
8/10

Malware Config

Targets

    • Target

      801acd1c8e0280b31e28c726f6b427a4.exe

    • Size

      363KB

    • MD5

      801acd1c8e0280b31e28c726f6b427a4

    • SHA1

      d83262e6081da951918dfa5121814bb82e95a269

    • SHA256

      67d15967c6afc53889aa22cad18fd6afccff7a4e513e218478f882fb01824dd4

    • SHA512

      39aad4426232681419d5d15ce061767fff5b2d3b25076ebe07a2cb0c6593b75dfb44d91e2ecc40dfde7ef1b8e9b643c25c22feaa89807ca9cd476f1a76782dae

    • SSDEEP

      3072:vWlhCuAo4LsUokIau9UUsnz+NSMfD9H5+EKj:ulhCuF4LTu9xsniNS4Dr8

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks