Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e5bc458157486d1e0a7586644cbbb94587b95c29baabb3cddbc8ca2ce17eb1a7

  • Size

    225KB

  • Sample

    221121-vmt6fadh6v

  • MD5

    1f7967917ae0b3ceccc0d63e2f249200

  • SHA1

    e470fb1cf95badc7322b33a069993dc7e2be7185

  • SHA256

    e5bc458157486d1e0a7586644cbbb94587b95c29baabb3cddbc8ca2ce17eb1a7

  • SHA512

    d7df85daf9c68c62e17ee4065b1fcf27673f43502ed770a730c8f1328ea0a62577d5f1210db6ff9c5558c5750cce6ed59169fe1f0c41734b0db7ba07b9952955

  • SSDEEP

    3072:+Oq9Zyvu1mFNPXmlRroxqT9S2c7gcPOLm28rZzAYoDPHYmFcAti2D:Iu4mFh+9S2c7xomHdNIY8cA02

Score
8/10

Malware Config

Targets

    • Target

      e5bc458157486d1e0a7586644cbbb94587b95c29baabb3cddbc8ca2ce17eb1a7

    • Size

      225KB

    • MD5

      1f7967917ae0b3ceccc0d63e2f249200

    • SHA1

      e470fb1cf95badc7322b33a069993dc7e2be7185

    • SHA256

      e5bc458157486d1e0a7586644cbbb94587b95c29baabb3cddbc8ca2ce17eb1a7

    • SHA512

      d7df85daf9c68c62e17ee4065b1fcf27673f43502ed770a730c8f1328ea0a62577d5f1210db6ff9c5558c5750cce6ed59169fe1f0c41734b0db7ba07b9952955

    • SSDEEP

      3072:+Oq9Zyvu1mFNPXmlRroxqT9S2c7gcPOLm28rZzAYoDPHYmFcAti2D:Iu4mFh+9S2c7xomHdNIY8cA02

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks