Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    abad9158160b15694b5cc95af8b3e732a6a2bae8235fd8f9494a2159245379d6

  • Size

    124KB

  • Sample

    221202-1b4hmaaf3v

  • MD5

    7ad21eba44b2912210cb885924546a3d

  • SHA1

    44281ba679e23b90aa9c87820cbbfa2909680aae

  • SHA256

    abad9158160b15694b5cc95af8b3e732a6a2bae8235fd8f9494a2159245379d6

  • SHA512

    c7ebd5193059311501c722fe0fbee7fce0b01d978a859079550fd6a24a2b36885f273512157a7b267508bc6742075c814be20f83e5c27034791a5265ee18fca2

  • SSDEEP

    1536:J/tkjpTQOJsU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VewNeG0h/l:jkjWOJsU0GgAT98t

Score
10/10

Malware Config

Targets

    • Target

      abad9158160b15694b5cc95af8b3e732a6a2bae8235fd8f9494a2159245379d6

    • Size

      124KB

    • MD5

      7ad21eba44b2912210cb885924546a3d

    • SHA1

      44281ba679e23b90aa9c87820cbbfa2909680aae

    • SHA256

      abad9158160b15694b5cc95af8b3e732a6a2bae8235fd8f9494a2159245379d6

    • SHA512

      c7ebd5193059311501c722fe0fbee7fce0b01d978a859079550fd6a24a2b36885f273512157a7b267508bc6742075c814be20f83e5c27034791a5265ee18fca2

    • SSDEEP

      1536:J/tkjpTQOJsU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VewNeG0h/l:jkjWOJsU0GgAT98t

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks