Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d9f97c2513e9dbc5a065cc4107576e8a9fd22febbd4a5c3857cf388e21cd9b07

  • Size

    492KB

  • Sample

    221203-ef4tasff5y

  • MD5

    6c5a68c3aba0ddcedd8c5b2cd13b65d0

  • SHA1

    6dd1839a937b966096ffc7202810bd02d49aec55

  • SHA256

    d9f97c2513e9dbc5a065cc4107576e8a9fd22febbd4a5c3857cf388e21cd9b07

  • SHA512

    8c10f16cb360a9a0383b5b5928451e9a04d2aa3d874263e8f1fc2cb2c469e14cf96da2aa4bd31de732162425b162c05e1c348bec59ea01e8fe94fb455c9cce73

  • SSDEEP

    12288:NWuYKH78FYmqyg31CVUK2IKhujlY8y0aeqsNYQU6VBaa8AYcwHVVFV:vQqs2qFyBai

Score
10/10

Malware Config

Targets

    • Target

      d9f97c2513e9dbc5a065cc4107576e8a9fd22febbd4a5c3857cf388e21cd9b07

    • Size

      492KB

    • MD5

      6c5a68c3aba0ddcedd8c5b2cd13b65d0

    • SHA1

      6dd1839a937b966096ffc7202810bd02d49aec55

    • SHA256

      d9f97c2513e9dbc5a065cc4107576e8a9fd22febbd4a5c3857cf388e21cd9b07

    • SHA512

      8c10f16cb360a9a0383b5b5928451e9a04d2aa3d874263e8f1fc2cb2c469e14cf96da2aa4bd31de732162425b162c05e1c348bec59ea01e8fe94fb455c9cce73

    • SSDEEP

      12288:NWuYKH78FYmqyg31CVUK2IKhujlY8y0aeqsNYQU6VBaa8AYcwHVVFV:vQqs2qFyBai

    Score
    10/10
    • Modifies firewall policy service

    • Adds policy Run key to start application

    • Executes dropped EXE

    • Modifies Installed Components in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks