Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8722938d86b0647c1b80a210a07094b74eb73248722aebfec4e2c4e6f229a63d

  • Size

    512KB

  • Sample

    221127-1gk88seg6w

  • MD5

    72f1dc958f5276c7b75fe0e2a62d4cb7

  • SHA1

    3363772a8dcd62e41e1b0ebc15b362fee07abd1d

  • SHA256

    8722938d86b0647c1b80a210a07094b74eb73248722aebfec4e2c4e6f229a63d

  • SHA512

    90a7b8e976073d1b8d73fbf3dd71082cab0f186af2d341821cf93db776f6309ad708b0778daf55d03fdc99a5524e78d5486a7a80be294825199d14030c31d0bd

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4p:0+h9OY70z+warul3E4p

Score
9/10

Malware Config

Targets

    • Target

      8722938d86b0647c1b80a210a07094b74eb73248722aebfec4e2c4e6f229a63d

    • Size

      512KB

    • MD5

      72f1dc958f5276c7b75fe0e2a62d4cb7

    • SHA1

      3363772a8dcd62e41e1b0ebc15b362fee07abd1d

    • SHA256

      8722938d86b0647c1b80a210a07094b74eb73248722aebfec4e2c4e6f229a63d

    • SHA512

      90a7b8e976073d1b8d73fbf3dd71082cab0f186af2d341821cf93db776f6309ad708b0778daf55d03fdc99a5524e78d5486a7a80be294825199d14030c31d0bd

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4p:0+h9OY70z+warul3E4p

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks