Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7522005153eb20bd66ffa8ec5e54ad4127fd67fcaf3819598ada3431fdd89421

  • Size

    512KB

  • Sample

    221127-2k27lahf7s

  • MD5

    7225a8fed16aa8147ee86c7af87051a5

  • SHA1

    d533e32144ffb40a41dbfb986410020608676ff9

  • SHA256

    7522005153eb20bd66ffa8ec5e54ad4127fd67fcaf3819598ada3431fdd89421

  • SHA512

    479beece231ce37a7d36b002579636c7c54332e0d9e8e6146943cbd1d88682d98f1b799e579ce728463846e694b22e5b9ab2b5a1d4b3ed5c2c2d0380e6d5c365

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E47:0+h9OY70z+warul3E47

Score
9/10

Malware Config

Targets

    • Target

      7522005153eb20bd66ffa8ec5e54ad4127fd67fcaf3819598ada3431fdd89421

    • Size

      512KB

    • MD5

      7225a8fed16aa8147ee86c7af87051a5

    • SHA1

      d533e32144ffb40a41dbfb986410020608676ff9

    • SHA256

      7522005153eb20bd66ffa8ec5e54ad4127fd67fcaf3819598ada3431fdd89421

    • SHA512

      479beece231ce37a7d36b002579636c7c54332e0d9e8e6146943cbd1d88682d98f1b799e579ce728463846e694b22e5b9ab2b5a1d4b3ed5c2c2d0380e6d5c365

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E47:0+h9OY70z+warul3E47

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks