Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6c222f6429e297f517eed9bc737a19e8eec08a3c840d70441c47836923b3761c

  • Size

    52KB

  • Sample

    221106-e4d8jsfadm

  • MD5

    38fad30c6ee239246741b4991d8d1720

  • SHA1

    b2da0d90a56e3ce0508d34b882c6937e230e3edc

  • SHA256

    6c222f6429e297f517eed9bc737a19e8eec08a3c840d70441c47836923b3761c

  • SHA512

    5401f6acb1a41a97cd0561fba8916650df2ad4ec9491323870a6642bf41717ed7365ea0313b1b93273a1eaf6e13bb0402b525f723f761abf2a5db66d20d7f710

  • SSDEEP

    768:EclW/lMFggAKwU0DN1C0wlfAenhODYaG426VmkblAYG3iqKMP65PuMPI2hTTToT:tWN/gAKqfCmQhOp2Yb9wbPCP5QqTToT

Malware Config

Targets

    • Target

      6c222f6429e297f517eed9bc737a19e8eec08a3c840d70441c47836923b3761c

    • Size

      52KB

    • MD5

      38fad30c6ee239246741b4991d8d1720

    • SHA1

      b2da0d90a56e3ce0508d34b882c6937e230e3edc

    • SHA256

      6c222f6429e297f517eed9bc737a19e8eec08a3c840d70441c47836923b3761c

    • SHA512

      5401f6acb1a41a97cd0561fba8916650df2ad4ec9491323870a6642bf41717ed7365ea0313b1b93273a1eaf6e13bb0402b525f723f761abf2a5db66d20d7f710

    • SSDEEP

      768:EclW/lMFggAKwU0DN1C0wlfAenhODYaG426VmkblAYG3iqKMP65PuMPI2hTTToT:tWN/gAKqfCmQhOp2Yb9wbPCP5QqTToT

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks