Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d7289f62d9618d72a8fba42105f375d7655e239bff8c1bdf42d15059c94a26cc

  • Size

    512KB

  • Sample

    221127-r8c79seh27

  • MD5

    3c077d7cf0505d8955c47235badf7f7a

  • SHA1

    b862e6c6cf167ad23686889cb60bc5e836e0425b

  • SHA256

    d7289f62d9618d72a8fba42105f375d7655e239bff8c1bdf42d15059c94a26cc

  • SHA512

    6b992e8c661a856e2690a0451e2e26165474f6580ca8d02363e1e684804ab745af8662700cb188c0e5cdc24309811a35c834d48a7910f1b6ca541d62f47eb025

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4a:0+h9OY70z+warul3E4a

Score
9/10

Malware Config

Targets

    • Target

      d7289f62d9618d72a8fba42105f375d7655e239bff8c1bdf42d15059c94a26cc

    • Size

      512KB

    • MD5

      3c077d7cf0505d8955c47235badf7f7a

    • SHA1

      b862e6c6cf167ad23686889cb60bc5e836e0425b

    • SHA256

      d7289f62d9618d72a8fba42105f375d7655e239bff8c1bdf42d15059c94a26cc

    • SHA512

      6b992e8c661a856e2690a0451e2e26165474f6580ca8d02363e1e684804ab745af8662700cb188c0e5cdc24309811a35c834d48a7910f1b6ca541d62f47eb025

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4a:0+h9OY70z+warul3E4a

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks