Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    7.3MB

  • Sample

    221126-1g2afsfe84

  • MD5

    b40caf5b378b32a8d0a0166a7c747183

  • SHA1

    fe8fef770407ccfe1ce1e6fdfabc243f0c1c2137

  • SHA256

    a32b3b6b910709300049be20c8fcb7eebff97e173ca5c7eb673e325b79e4f8b8

  • SHA512

    c70be6e8da2a3fbc0d8b6ee5a80c3bbc86cc94c2002ee43db26655cf2342eb63fbb2f69eecc7af21d6a75a206e216951181903d1eb18c11c0b29c0e0375a16e0

  • SSDEEP

    196608:91ORsWUPGvhRIglklFFjGc5yegREJdWAG07MVUun5cfdMOltzj:3ORNUuC0kLdyee8EAGzHnqSOltzj

Score
8/10

Malware Config

Targets

    • Target

      file.exe

    • Size

      7.3MB

    • MD5

      b40caf5b378b32a8d0a0166a7c747183

    • SHA1

      fe8fef770407ccfe1ce1e6fdfabc243f0c1c2137

    • SHA256

      a32b3b6b910709300049be20c8fcb7eebff97e173ca5c7eb673e325b79e4f8b8

    • SHA512

      c70be6e8da2a3fbc0d8b6ee5a80c3bbc86cc94c2002ee43db26655cf2342eb63fbb2f69eecc7af21d6a75a206e216951181903d1eb18c11c0b29c0e0375a16e0

    • SSDEEP

      196608:91ORsWUPGvhRIglklFFjGc5yegREJdWAG07MVUun5cfdMOltzj:3ORNUuC0kLdyee8EAGzHnqSOltzj

    Score
    8/10
    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks