Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f43c6335a281190b674a2f38275053fb644d6a90a4c2107bee51d230b3f214ff

  • Size

    512KB

  • Sample

    221128-hfr2aaha3y

  • MD5

    870b19fa8a39ffbc6914c230e84556fa

  • SHA1

    b32bf229a2e988c9f1d6e5c72ef72d45a2dd9f76

  • SHA256

    f43c6335a281190b674a2f38275053fb644d6a90a4c2107bee51d230b3f214ff

  • SHA512

    e28c97b9a41237eec356c81d73bf183533ebef7f58c165421cea62fec9172e6c07ff94504671c12c5798af7d1fe8a643d8d439e1aadb6d0437a5d941bd8899e4

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4p:0+h9OY70z+warul3E4p

Score
9/10

Malware Config

Targets

    • Target

      f43c6335a281190b674a2f38275053fb644d6a90a4c2107bee51d230b3f214ff

    • Size

      512KB

    • MD5

      870b19fa8a39ffbc6914c230e84556fa

    • SHA1

      b32bf229a2e988c9f1d6e5c72ef72d45a2dd9f76

    • SHA256

      f43c6335a281190b674a2f38275053fb644d6a90a4c2107bee51d230b3f214ff

    • SHA512

      e28c97b9a41237eec356c81d73bf183533ebef7f58c165421cea62fec9172e6c07ff94504671c12c5798af7d1fe8a643d8d439e1aadb6d0437a5d941bd8899e4

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4p:0+h9OY70z+warul3E4p

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks