Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

Details.lnk

windows7-x64

8

Details.lnk

windows10-2004-x64

8

disallowab...ry.dll

windows7-x64

1

disallowab...ry.dll

windows10-2004-x64

1

disallowab...gs.cmd

windows7-x64

1

disallowab...gs.cmd

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Details3615.iso

  • Size

    724KB

  • Sample

    221028-br8pvaebh6

  • MD5

    7fdb7d2f86663a3d2ae99ceed4e9e877

  • SHA1

    f98529d4d3fa4b44f87f839a4cf0e29715fe5813

  • SHA256

    d0afe8a488e6f60cd7b1a862f319215f7d65b7964e00bd3bf02132b81d2e5d48

  • SHA512

    31780f913601e90e4fe5986976a09020a8d2669ab310ec2aa8eaaa339a6b54b525d203b869a369ee8fa828d44c342511eb735e9bbf550851114753abc2e7dfd6

  • SSDEEP

    12288:7qdD/sblafl4M/8toGXJZ6diNjNo8Ywr6t57AKC/3wdOcUwDOMHHCgOWeO:7qdclafl4eGXuiNq8Ye6cvw4wrHHCgO+

Score
8/10

Malware Config

Targets

    • Target

      Details.lnk

    • Size

      1KB

    • MD5

      f3c9192e747c7b3b0b861644ccf147ae

    • SHA1

      37db46dc65a31dc8d0f2945ad9b1430b31d486e4

    • SHA256

      d85957d2fc60de0204d94475a4ce85691e4de002e08f55809861a48f5ea58c14

    • SHA512

      0692139ff36b3cdb2ef3971fea1e1bb57f83df8ba28bec6e947bba1cd1ed820b5fbd174f7a62a1fe118e6a168cccd2fc56db1cfc733f9afa397194ed0cdec1da

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      disallowable/lavatory.dat

    • Size

      422KB

    • MD5

      44dc7cee0491d88c106a03ba4a147b3a

    • SHA1

      b192eb80bcc6bc68689f7eaca2f22bceaca05a26

    • SHA256

      cc816cb9b0bc626a5c5c7dd9143565b31edd1458ee67a4d6e89dcc640679f871

    • SHA512

      f2e04b214b1acc8ca03cdaf7fc8d4941ccd9b0d57ecae256401f4277f8b450104098367cb3f8f152ea394a3515cbd70f4f994f910891bb3965a28fd367125002

    • SSDEEP

      12288:eqdD/sblafl4M/8toGXJZ6diNjNo8Ywr6t57AKC:eqdclafl4eGXuiNq8Ye6c

    Score
    1/10
    behavioral3behavioral4

    • Target

      disallowable/leggings.cmd

    • Size

      353B

    • MD5

      549134ecfe26a6eca256736cf8545a87

    • SHA1

      c6622eb02462ae0b2a99721854bd46c5fb8f680f

    • SHA256

      69d7d7ec242efb6b5a92d67ae900ce8b6234433dc1536065c4fffae5e6205015

    • SHA512

      2e8f72efffbe2e489158a922f15beec35c8e76700713e564df9a0acde7d7e75d6eb349d37c7d7e081fd163577003fab4ad82e6f6d7bef6e9850716eed054c91f

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v6

Tasks