Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f09550a9f204dff8c3f95fc47ff0d860fc74a4b734878ff3642b662980abcd32

  • Size

    512KB

  • Sample

    221127-1k388abb33

  • MD5

    43d39b119e41399b678e839aeaf87eb0

  • SHA1

    2ebe6f381ab707e2edce1512a490b6d156fd6263

  • SHA256

    f09550a9f204dff8c3f95fc47ff0d860fc74a4b734878ff3642b662980abcd32

  • SHA512

    205e08115affe7eed8456eb30070b60a2f2d3c12fa40cc99f4fa988a261c4ce537b5a44c7eaac1721ee4113d9c368fc28ebf2160b5158454e42be67804eddc67

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4N:0+h9OY70z+warul3E4N

Score
9/10

Malware Config

Targets

    • Target

      f09550a9f204dff8c3f95fc47ff0d860fc74a4b734878ff3642b662980abcd32

    • Size

      512KB

    • MD5

      43d39b119e41399b678e839aeaf87eb0

    • SHA1

      2ebe6f381ab707e2edce1512a490b6d156fd6263

    • SHA256

      f09550a9f204dff8c3f95fc47ff0d860fc74a4b734878ff3642b662980abcd32

    • SHA512

      205e08115affe7eed8456eb30070b60a2f2d3c12fa40cc99f4fa988a261c4ce537b5a44c7eaac1721ee4113d9c368fc28ebf2160b5158454e42be67804eddc67

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4N:0+h9OY70z+warul3E4N

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks