Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ab5046728ae15e3d2a0bf24a9f0f3bacc6adf3cd09dae411771fda56ddea533b

  • Size

    151KB

  • Sample

    221201-yfqffshc5z

  • MD5

    b0f9ce4e927a37035f8c70af45389a4f

  • SHA1

    0d4322e633ad7f2483b16e51359507b5256a49ca

  • SHA256

    ab5046728ae15e3d2a0bf24a9f0f3bacc6adf3cd09dae411771fda56ddea533b

  • SHA512

    56914c5623ecc87cff1dde10342e36e1b23efae3ab0a324877cbd9489f7926a2e6d632b979a32bf4d944aa2ad70c375166292454afeabd16725979207b258765

  • SSDEEP

    3072:1bRbVSvT5MiRI33wIXHoDJfeIJlghKkAXjjxTqq1mBYiO:1bWvT5MiRI33wNXdkATtT71mB

Score
8/10

Malware Config

Targets

    • Target

      ab5046728ae15e3d2a0bf24a9f0f3bacc6adf3cd09dae411771fda56ddea533b

    • Size

      151KB

    • MD5

      b0f9ce4e927a37035f8c70af45389a4f

    • SHA1

      0d4322e633ad7f2483b16e51359507b5256a49ca

    • SHA256

      ab5046728ae15e3d2a0bf24a9f0f3bacc6adf3cd09dae411771fda56ddea533b

    • SHA512

      56914c5623ecc87cff1dde10342e36e1b23efae3ab0a324877cbd9489f7926a2e6d632b979a32bf4d944aa2ad70c375166292454afeabd16725979207b258765

    • SSDEEP

      3072:1bRbVSvT5MiRI33wIXHoDJfeIJlghKkAXjjxTqq1mBYiO:1bWvT5MiRI33wNXdkATtT71mB

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks