Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

lic-policy...hs.exe

windows7-x64

7

lic-policy...hs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5da219f776810a42d8c8e26989f420ece92e87b6279e3bb39dc9627ad0b7f909.zip

  • Size

    3.5MB

  • Sample

    221105-wcz5dabbgj

  • MD5

    975ee61886c89ddb5676a4f20d8c3fc2

  • SHA1

    69a1b0555660b628d3bbac9711b4ec88d3aed81e

  • SHA256

    e29971fc48aed77c10dbcbb3b98cd5486f00b45f5a6623014b94b6c945e15b5f

  • SHA512

    c9b73c3b0db8bca09f76d461ff5f2808b4861204ac4f2c13a94737b84f0775f740e49c75b2754e52c5f24480ecbc53f695b86e94dd4e7a3f11283903788f03b1

  • SSDEEP

    98304:Eel6aAzZP/rzfIhHOvf/JMBJCZ+GhRmDrRZMjqZ:EelqztIBOvfBAAJ+VZ3Z

Score
8/10

Malware Config

Targets

    • Target

      lic-policy-lapse-after-six-months.exe

    • Size

      301.4MB

    • MD5

      21aa5327732379b00c87264999dec580

    • SHA1

      d32c06c3906da85bdc791bd348b7adf254be499a

    • SHA256

      5da219f776810a42d8c8e26989f420ece92e87b6279e3bb39dc9627ad0b7f909

    • SHA512

      386f9bc8323ccdb707f7a8e6d31a15551810158fe33e11266af45b17e1fb0f65ead9f07287738f7807f88b65191e25bd5cbcf3a2f401a56ce1b0ac71d176e4e9

    • SSDEEP

      24576:t4NyVDbJRwVTbTnhFJDKDAYa0lpHaCtdihPaxFMe2Bfn45fJJJJJJJJJJJJJJJJO:thh3SbTHlQtv64o1e2Bf45m

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks