Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17e07e8f596dfc3010ba44fc95612345969d45d5670a634a06c4e4d02f46f1fb

  • Size

    256KB

  • Sample

    221129-dv4w6sag86

  • MD5

    117f8f1369374f6269cedf1a56fa9ea7

  • SHA1

    43250be822934748e6718f282c9de6fd4bd82464

  • SHA256

    17e07e8f596dfc3010ba44fc95612345969d45d5670a634a06c4e4d02f46f1fb

  • SHA512

    f7cfdd9e006a271b2de95be8829e40f11587be95b2be911250bd31c01b151e2142666dc9d9fabf8cb260601415a4d626800b8dadd120b62d8ebaa2d32d1b0a14

  • SSDEEP

    6144:YLEBRa0wxtGUjk+UHAS3+qipkWqWHa2xUsKjVx5LK6HX36X6xv76gcBRSUznDy:YLEc0wTGUjk//3+qEkWqWHa2xUsKjVxV

Score
10/10

Malware Config

Targets

    • Target

      17e07e8f596dfc3010ba44fc95612345969d45d5670a634a06c4e4d02f46f1fb

    • Size

      256KB

    • MD5

      117f8f1369374f6269cedf1a56fa9ea7

    • SHA1

      43250be822934748e6718f282c9de6fd4bd82464

    • SHA256

      17e07e8f596dfc3010ba44fc95612345969d45d5670a634a06c4e4d02f46f1fb

    • SHA512

      f7cfdd9e006a271b2de95be8829e40f11587be95b2be911250bd31c01b151e2142666dc9d9fabf8cb260601415a4d626800b8dadd120b62d8ebaa2d32d1b0a14

    • SSDEEP

      6144:YLEBRa0wxtGUjk+UHAS3+qipkWqWHa2xUsKjVx5LK6HX36X6xv76gcBRSUznDy:YLEc0wTGUjk//3+qEkWqWHa2xUsKjVxV

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks