Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f436c4aa86a31d368d1cd65a370ff56ecec866385c33f6edcc53f63fbf1b1c7c

  • Size

    512KB

  • Sample

    221127-1bqlrsed51

  • MD5

    3dd9213532a832cd4cf703b5aff9bc85

  • SHA1

    d3152e15aa77649ee31c8bf8d047649e565e88d9

  • SHA256

    f436c4aa86a31d368d1cd65a370ff56ecec866385c33f6edcc53f63fbf1b1c7c

  • SHA512

    1202cf1ec8a6dea8d29aa9895fc1fdce4e0fbb3729c605692f249132eafd46a5fc0681ebc28d4731a8248cb2dc5f932463d9ad9dfbb641a58a70db67cb4d7f1f

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4Q:0+h9OY70z+warul3E4Q

Score
9/10

Malware Config

Targets

    • Target

      f436c4aa86a31d368d1cd65a370ff56ecec866385c33f6edcc53f63fbf1b1c7c

    • Size

      512KB

    • MD5

      3dd9213532a832cd4cf703b5aff9bc85

    • SHA1

      d3152e15aa77649ee31c8bf8d047649e565e88d9

    • SHA256

      f436c4aa86a31d368d1cd65a370ff56ecec866385c33f6edcc53f63fbf1b1c7c

    • SHA512

      1202cf1ec8a6dea8d29aa9895fc1fdce4e0fbb3729c605692f249132eafd46a5fc0681ebc28d4731a8248cb2dc5f932463d9ad9dfbb641a58a70db67cb4d7f1f

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4Q:0+h9OY70z+warul3E4Q

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks