Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    758b5970f0a41b6cbba3b9858b7248e127d963105091de4b41a77129619db660

  • Size

    164KB

  • Sample

    221030-y4j9caacar

  • MD5

    a20cf9d22e5a204df30800c22b9237ac

  • SHA1

    d1fe237de962b8b44db25c376488126a49e69bb7

  • SHA256

    758b5970f0a41b6cbba3b9858b7248e127d963105091de4b41a77129619db660

  • SHA512

    cb34ee0e86c98c574dea896d417eb7573e7df9a0e6e3da0340df3611cce3abfec8f943e7657863f7d2886a3f92715d6d6b61ce6f3257ec636a7cb11d62cc887f

  • SSDEEP

    3072:FZqESLsNgqDV3xoYaEskm8+cAWEDoZv4mfrmZs20IkG:pSLsNgA3xoYaEN+cAWfZAmfrIs2

Score
10/10

Malware Config

Targets

    • Target

      758b5970f0a41b6cbba3b9858b7248e127d963105091de4b41a77129619db660

    • Size

      164KB

    • MD5

      a20cf9d22e5a204df30800c22b9237ac

    • SHA1

      d1fe237de962b8b44db25c376488126a49e69bb7

    • SHA256

      758b5970f0a41b6cbba3b9858b7248e127d963105091de4b41a77129619db660

    • SHA512

      cb34ee0e86c98c574dea896d417eb7573e7df9a0e6e3da0340df3611cce3abfec8f943e7657863f7d2886a3f92715d6d6b61ce6f3257ec636a7cb11d62cc887f

    • SSDEEP

      3072:FZqESLsNgqDV3xoYaEskm8+cAWEDoZv4mfrmZs20IkG:pSLsNgA3xoYaEN+cAWfZAmfrIs2

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks