Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1e7d983f1301d547e2cfabbafee1c47c2bc0c153007037432f523ea327514b54

  • Size

    393KB

  • Sample

    221107-trdtksfeb3

  • MD5

    619719bf6a0e21e5846a33b99497383f

  • SHA1

    e850b20cd42d0d9ad63d9b233124175bff89a86b

  • SHA256

    1e7d983f1301d547e2cfabbafee1c47c2bc0c153007037432f523ea327514b54

  • SHA512

    18d3cccaf0bd9c6e0de7e0ee0ffd4425f062fbc373a9e05cfaf89284d5ba6be3d9f9c998d88ed58aa3cd10f5841c27cb2733cd1d7f62041af1ab278f3c2412e5

  • SSDEEP

    3072:HV06XtivWMcMxHt3thiZXVLpx8r2BjnDXmPBo5kkHTGnzKnOMEndj/j/j/foMJ/o:ZXtivW6pt9hiLy2BjaYknbZnzAL11

Score
8/10

Malware Config

Targets

    • Target

      1e7d983f1301d547e2cfabbafee1c47c2bc0c153007037432f523ea327514b54

    • Size

      393KB

    • MD5

      619719bf6a0e21e5846a33b99497383f

    • SHA1

      e850b20cd42d0d9ad63d9b233124175bff89a86b

    • SHA256

      1e7d983f1301d547e2cfabbafee1c47c2bc0c153007037432f523ea327514b54

    • SHA512

      18d3cccaf0bd9c6e0de7e0ee0ffd4425f062fbc373a9e05cfaf89284d5ba6be3d9f9c998d88ed58aa3cd10f5841c27cb2733cd1d7f62041af1ab278f3c2412e5

    • SSDEEP

      3072:HV06XtivWMcMxHt3thiZXVLpx8r2BjnDXmPBo5kkHTGnzKnOMEndj/j/j/foMJ/o:ZXtivW6pt9hiLy2BjaYknbZnzAL11

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks