Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a

  • Size

    62KB

  • Sample

    221203-akjayaca3w

  • MD5

    0a797adc3f086673bfceb8254c3912d4

  • SHA1

    0d3a2367d5625f30ac6deca128c339b6b5903776

  • SHA256

    9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a

  • SHA512

    7378ff873274e4bc1ad5032ecc30f9743e0266bac95c956b938195bc8d67ee8afe628f4f8d7874bb397e885933ade81b00846e899bf272d31ba3334ee185d8ea

  • SSDEEP

    1536:bpg6nW9+kdTx87Iwterf9KZezMv5oITjhyb5lZT:bpg6W5kRMf9BY5ooS

Score
7/10

Malware Config

Targets

    • Target

      9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a

    • Size

      62KB

    • MD5

      0a797adc3f086673bfceb8254c3912d4

    • SHA1

      0d3a2367d5625f30ac6deca128c339b6b5903776

    • SHA256

      9bf2f997ca1077d7820d7e7d53622f694f45fd19ee934fb91fc772221e12eb4a

    • SHA512

      7378ff873274e4bc1ad5032ecc30f9743e0266bac95c956b938195bc8d67ee8afe628f4f8d7874bb397e885933ade81b00846e899bf272d31ba3334ee185d8ea

    • SSDEEP

      1536:bpg6nW9+kdTx87Iwterf9KZezMv5oITjhyb5lZT:bpg6W5kRMf9BY5ooS

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies WinLogon

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks