Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    83ed8c4c26a033051119ef1f56ab439b549ddd43feff0af527ced66cd3088887

  • Size

    512KB

  • Sample

    221128-jfexdsfc59

  • MD5

    d99633b2f3340d311f47ee62f764ad74

  • SHA1

    a2c55975e099a6615133f25da205d4004888cf7a

  • SHA256

    83ed8c4c26a033051119ef1f56ab439b549ddd43feff0af527ced66cd3088887

  • SHA512

    083ee43e49ac6eb074c475bee38ff4cbb2e130b82d4682ab94bd1b6a4d9018e50fbc28c42f53714e30c89c5dd9443e9fb15554d5f381af11442d9f2fcb2ea0b7

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4x:0+h9OY70z+warul3E4x

Score
9/10

Malware Config

Targets

    • Target

      83ed8c4c26a033051119ef1f56ab439b549ddd43feff0af527ced66cd3088887

    • Size

      512KB

    • MD5

      d99633b2f3340d311f47ee62f764ad74

    • SHA1

      a2c55975e099a6615133f25da205d4004888cf7a

    • SHA256

      83ed8c4c26a033051119ef1f56ab439b549ddd43feff0af527ced66cd3088887

    • SHA512

      083ee43e49ac6eb074c475bee38ff4cbb2e130b82d4682ab94bd1b6a4d9018e50fbc28c42f53714e30c89c5dd9443e9fb15554d5f381af11442d9f2fcb2ea0b7

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4x:0+h9OY70z+warul3E4x

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks