Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    95b5637c30c95aa89603935a9eef91e2c878eb82db545970c398873c9bfcd873

  • Size

    48KB

  • Sample

    221201-bbtkzsaf73

  • MD5

    368c9fd1dd9e0a09df5fb9927953cbe0

  • SHA1

    20c356107c3c62ed22882bb1e256bcaa4c89dffe

  • SHA256

    95b5637c30c95aa89603935a9eef91e2c878eb82db545970c398873c9bfcd873

  • SHA512

    0b7d54f7c4760819b786e902017be4fbb8563c8f7e4f876b33dabe7561d3a5f8535c76321db666de7b563cc9c658f29c5b2bb476ba7672b1695e4e308725e5b9

  • SSDEEP

    768:/7iwZAYLgeRyhLQzFJr1o4zRtUVsdmdrdfq/g2/P5QbKrxfWHQpqsbmpsPHJ:/7iwZgahMdrdfd+AS10QpqsyeHJ

Score
8/10

Malware Config

Targets

    • Target

      95b5637c30c95aa89603935a9eef91e2c878eb82db545970c398873c9bfcd873

    • Size

      48KB

    • MD5

      368c9fd1dd9e0a09df5fb9927953cbe0

    • SHA1

      20c356107c3c62ed22882bb1e256bcaa4c89dffe

    • SHA256

      95b5637c30c95aa89603935a9eef91e2c878eb82db545970c398873c9bfcd873

    • SHA512

      0b7d54f7c4760819b786e902017be4fbb8563c8f7e4f876b33dabe7561d3a5f8535c76321db666de7b563cc9c658f29c5b2bb476ba7672b1695e4e308725e5b9

    • SSDEEP

      768:/7iwZAYLgeRyhLQzFJr1o4zRtUVsdmdrdfq/g2/P5QbKrxfWHQpqsbmpsPHJ:/7iwZgahMdrdfd+AS10QpqsyeHJ

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks