Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7b2ffb70b62a3c0e28528d36d710f4f85a3fbaaab4afd699c8259617c5438939

  • Size

    116KB

  • Sample

    221201-2fqm1agf77

  • MD5

    76e18848693ac0af18f991e8b80541d7

  • SHA1

    8ddd0e6f736414a0cf941af432f9dd847872cd74

  • SHA256

    7b2ffb70b62a3c0e28528d36d710f4f85a3fbaaab4afd699c8259617c5438939

  • SHA512

    8fdc84dec4718afaef4c667f1a5bd32024a7f23393c611cbb904c07acd942acfbf4452d672c69c18db08676eafab2d2944522793e2b09046c3a9aca9dcaf918c

  • SSDEEP

    3072:RbupWEDVWBOVbHd1P5OMNjFW64Mm44QvUaqHS7eDEEGBS:RiYaEBOVb3EMNjFWrvht1kS

Score
8/10

Malware Config

Targets

    • Target

      7b2ffb70b62a3c0e28528d36d710f4f85a3fbaaab4afd699c8259617c5438939

    • Size

      116KB

    • MD5

      76e18848693ac0af18f991e8b80541d7

    • SHA1

      8ddd0e6f736414a0cf941af432f9dd847872cd74

    • SHA256

      7b2ffb70b62a3c0e28528d36d710f4f85a3fbaaab4afd699c8259617c5438939

    • SHA512

      8fdc84dec4718afaef4c667f1a5bd32024a7f23393c611cbb904c07acd942acfbf4452d672c69c18db08676eafab2d2944522793e2b09046c3a9aca9dcaf918c

    • SSDEEP

      3072:RbupWEDVWBOVbHd1P5OMNjFW64Mm44QvUaqHS7eDEEGBS:RiYaEBOVb3EMNjFWrvht1kS

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks