Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7d39687300a4e509f6a623ce3b72e4b8ec3dfb3b54cf6ac5f390d8253134705b

  • Size

    244KB

  • Sample

    221020-b79l3shdgm

  • MD5

    807bf916f297d31f8dfa3c6ce294aa20

  • SHA1

    0d583cd5b2469cea9c663630012a1997b842bc15

  • SHA256

    7d39687300a4e509f6a623ce3b72e4b8ec3dfb3b54cf6ac5f390d8253134705b

  • SHA512

    ba47c59c5161a9800caf0794113647abc53baa4a7f2fc3a0a1734ad9bc2fad8294f08621a85d48b2a451569967986629ebccd0d05f69bd88d8c949d14591ecac

  • SSDEEP

    3072:wjvM4AOx/dMcy1imsW7A0g3XDYHYTvZm3ov5Q4/cMIVH5bEvhSSqeLSqnjYIb:q050Fy1imdJgc4s2QRhH5IXV

Score
10/10

Malware Config

Targets

    • Target

      7d39687300a4e509f6a623ce3b72e4b8ec3dfb3b54cf6ac5f390d8253134705b

    • Size

      244KB

    • MD5

      807bf916f297d31f8dfa3c6ce294aa20

    • SHA1

      0d583cd5b2469cea9c663630012a1997b842bc15

    • SHA256

      7d39687300a4e509f6a623ce3b72e4b8ec3dfb3b54cf6ac5f390d8253134705b

    • SHA512

      ba47c59c5161a9800caf0794113647abc53baa4a7f2fc3a0a1734ad9bc2fad8294f08621a85d48b2a451569967986629ebccd0d05f69bd88d8c949d14591ecac

    • SSDEEP

      3072:wjvM4AOx/dMcy1imsW7A0g3XDYHYTvZm3ov5Q4/cMIVH5bEvhSSqeLSqnjYIb:q050Fy1imdJgc4s2QRhH5IXV

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks