Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b3f3289b66122668404a52b5b5555fedeacfa6d01168e8d16b92d1cbd6026942

  • Size

    86KB

  • Sample

    221106-vj4kpseeek

  • MD5

    0cf49f48aec149300115b9bc1a3a33e0

  • SHA1

    01fb1e8ba7d4518fa90ac01b34884a9dba32b6d1

  • SHA256

    b3f3289b66122668404a52b5b5555fedeacfa6d01168e8d16b92d1cbd6026942

  • SHA512

    549b2fd777eed5252b233a4f2dc346fbaaca8e6361bf4eccd31994c20fdb3c31574f0d6094917c7ac702d823f4da64c8212a4abd0bebd072837a0ebd6cbadb14

  • SSDEEP

    1536:K/E/8FZkgTotnSe+L6ZtTqI1Rfkq4fpACpgOWs96IINaAg:KckDkgT4SBCt71RfkqdCpx2

Score
10/10

Malware Config

Targets

    • Target

      b3f3289b66122668404a52b5b5555fedeacfa6d01168e8d16b92d1cbd6026942

    • Size

      86KB

    • MD5

      0cf49f48aec149300115b9bc1a3a33e0

    • SHA1

      01fb1e8ba7d4518fa90ac01b34884a9dba32b6d1

    • SHA256

      b3f3289b66122668404a52b5b5555fedeacfa6d01168e8d16b92d1cbd6026942

    • SHA512

      549b2fd777eed5252b233a4f2dc346fbaaca8e6361bf4eccd31994c20fdb3c31574f0d6094917c7ac702d823f4da64c8212a4abd0bebd072837a0ebd6cbadb14

    • SSDEEP

      1536:K/E/8FZkgTotnSe+L6ZtTqI1Rfkq4fpACpgOWs96IINaAg:KckDkgT4SBCt71RfkqdCpx2

    Score
    10/10
    • Modifies firewall policy service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks