Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1777653d60edd3e15c0670e99b2fa0d7efed3400614e59b3036b1196d67198d1

  • Size

    151KB

  • Sample

    221127-jjvf9aea5t

  • MD5

    ae94b23012157c6c7205b8428466fd47

  • SHA1

    b630a8f7ee8806263b2abe5b0a0884ecf2193ba5

  • SHA256

    1777653d60edd3e15c0670e99b2fa0d7efed3400614e59b3036b1196d67198d1

  • SHA512

    c828f741706e9a3f5c2772e1f8e217718e7ed4d54bf1bd55b61bb29b96ae1a668362e031252184b9898e9f6ed8a9d78aaaf2dd0bda05fc4a2f615f32fae27fb6

  • SSDEEP

    3072:sLANnN/I9YHmMxd55YjB+4GSvquAJvJDsuMqd:sLANnq983vS5AN5t

Score
8/10

Malware Config

Targets

    • Target

      1777653d60edd3e15c0670e99b2fa0d7efed3400614e59b3036b1196d67198d1

    • Size

      151KB

    • MD5

      ae94b23012157c6c7205b8428466fd47

    • SHA1

      b630a8f7ee8806263b2abe5b0a0884ecf2193ba5

    • SHA256

      1777653d60edd3e15c0670e99b2fa0d7efed3400614e59b3036b1196d67198d1

    • SHA512

      c828f741706e9a3f5c2772e1f8e217718e7ed4d54bf1bd55b61bb29b96ae1a668362e031252184b9898e9f6ed8a9d78aaaf2dd0bda05fc4a2f615f32fae27fb6

    • SSDEEP

      3072:sLANnN/I9YHmMxd55YjB+4GSvquAJvJDsuMqd:sLANnq983vS5AN5t

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks