Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    773cb4acf9773f0816e4ecd48188e5ef9af85ffbd46d83cc6a63d682d47befc1

  • Size

    614KB

  • Sample

    221127-hyfe7sgh22

  • MD5

    8a464fa26777347c8bbf50f857d326fd

  • SHA1

    18a759863d14946907a9486e4ff959e0f11f99e7

  • SHA256

    773cb4acf9773f0816e4ecd48188e5ef9af85ffbd46d83cc6a63d682d47befc1

  • SHA512

    acf59644d63db14f1a3e2ceb89f55a648a78f2e5a3ba0155fc7114cf5f40dc7f4eca6dd60448954c5a83d857a92ae3a16613787b21ec6b8fe215dded2b8ec2dc

  • SSDEEP

    12288:UYRN6Ul2gavsFJZC42Bu0aHpdjzwJ4baLN+gZPNOcmVuSR3O9cubDa:HKUl2wFJZCRBu0KA8VAnmVugubDa

Score
9/10

Malware Config

Targets

    • Target

      773cb4acf9773f0816e4ecd48188e5ef9af85ffbd46d83cc6a63d682d47befc1

    • Size

      614KB

    • MD5

      8a464fa26777347c8bbf50f857d326fd

    • SHA1

      18a759863d14946907a9486e4ff959e0f11f99e7

    • SHA256

      773cb4acf9773f0816e4ecd48188e5ef9af85ffbd46d83cc6a63d682d47befc1

    • SHA512

      acf59644d63db14f1a3e2ceb89f55a648a78f2e5a3ba0155fc7114cf5f40dc7f4eca6dd60448954c5a83d857a92ae3a16613787b21ec6b8fe215dded2b8ec2dc

    • SSDEEP

      12288:UYRN6Ul2gavsFJZC42Bu0aHpdjzwJ4baLN+gZPNOcmVuSR3O9cubDa:HKUl2wFJZCRBu0KA8VAnmVugubDa

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks