Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec

  • Size

    307KB

  • Sample

    221107-et5yhsaefq

  • MD5

    0eaf291e0565a86af393bc576ebf0140

  • SHA1

    78ca77d73e696c08c75d0a3ca3d43833f95fbf25

  • SHA256

    52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec

  • SHA512

    1adea0d508fe2c2c2bc793907241467d80644d58cdda0da6269e32148f5f94fff19834a03f59f79ac8f21565acd0e861b4c5a4fe20526a4a584980381fe2ab61

  • SSDEEP

    3072:0ulG96P/KdN8HdvkXfIIIIIIIIIIIIIIIIIIIIIIIIIIIIxJIIIIIIIIIIIIIIIS:02Hd8XzKedQBRZFeE7BUBBb9l

Score
8/10

Malware Config

Targets

    • Target

      52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec

    • Size

      307KB

    • MD5

      0eaf291e0565a86af393bc576ebf0140

    • SHA1

      78ca77d73e696c08c75d0a3ca3d43833f95fbf25

    • SHA256

      52e8e2163c3918de5cb183abe3be134e11d83436d239e78e571fa9c198973fec

    • SHA512

      1adea0d508fe2c2c2bc793907241467d80644d58cdda0da6269e32148f5f94fff19834a03f59f79ac8f21565acd0e861b4c5a4fe20526a4a584980381fe2ab61

    • SSDEEP

      3072:0ulG96P/KdN8HdvkXfIIIIIIIIIIIIIIIIIIIIIIIIIIIIxJIIIIIIIIIIIIIIIS:02Hd8XzKedQBRZFeE7BUBBb9l

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks