Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

  • Size

    316KB

  • Sample

    221201-3nqteafg9v

  • MD5

    8aa3ee839270cb28d05534f3fd5721d2

  • SHA1

    be496410a16b7bd22d04c5234cfb10c0f00c3514

  • SHA256

    d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

  • SHA512

    52ef0db49cdf4a3e2f43d910e170afdb12568a8d31f6c6a7987b7d99730983e99e744f2d3c80e8efed20ed57986d0eb57a2836a6a270cd4f5aebae0178ba82b0

  • SSDEEP

    3072:VZJwhpF3SpWufu/muESamFi5eLb532qRgzqRe/aT4E1KZnBmaNtDvJRZ8Ng0ykdi:VZ43jb532qRmqRe/aT4EYDmaNtNRKNi

Score
10/10

Malware Config

Targets

    • Target

      d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

    • Size

      316KB

    • MD5

      8aa3ee839270cb28d05534f3fd5721d2

    • SHA1

      be496410a16b7bd22d04c5234cfb10c0f00c3514

    • SHA256

      d064228c4138fbebb897dd0d74a69450ae58f1240ac9a33be7bb8e211f87a7db

    • SHA512

      52ef0db49cdf4a3e2f43d910e170afdb12568a8d31f6c6a7987b7d99730983e99e744f2d3c80e8efed20ed57986d0eb57a2836a6a270cd4f5aebae0178ba82b0

    • SSDEEP

      3072:VZJwhpF3SpWufu/muESamFi5eLb532qRgzqRe/aT4E1KZnBmaNtDvJRZ8Ng0ykdi:VZ43jb532qRmqRe/aT4EYDmaNtNRKNi

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks