Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    954b4b12ebe3675178265094ae12d9e61230535953034f50f0861e1b638ca3b8

  • Size

    512KB

  • Sample

    221128-h931mseg83

  • MD5

    212afcf64fe02322332bf0e37b07ee44

  • SHA1

    743cd85215c0963f50335ba1a64e20803e345566

  • SHA256

    954b4b12ebe3675178265094ae12d9e61230535953034f50f0861e1b638ca3b8

  • SHA512

    fdac96379fa5183d3ac332f3aa959587ec0d7e0bf00f5a4596c15ab48e0dc56fd41b06aad42040dd72664be6d34dc768682e5dac022556c5cb93c7c613d20a81

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4S:0+h9OY70z+warul3E4S

Score
9/10

Malware Config

Targets

    • Target

      954b4b12ebe3675178265094ae12d9e61230535953034f50f0861e1b638ca3b8

    • Size

      512KB

    • MD5

      212afcf64fe02322332bf0e37b07ee44

    • SHA1

      743cd85215c0963f50335ba1a64e20803e345566

    • SHA256

      954b4b12ebe3675178265094ae12d9e61230535953034f50f0861e1b638ca3b8

    • SHA512

      fdac96379fa5183d3ac332f3aa959587ec0d7e0bf00f5a4596c15ab48e0dc56fd41b06aad42040dd72664be6d34dc768682e5dac022556c5cb93c7c613d20a81

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4S:0+h9OY70z+warul3E4S

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks