Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f1a0b722f22d7bc45a48c1a33ff07adaf1143ea382f6125062fd560bdede74ad

  • Size

    173KB

  • Sample

    221203-nhagxaeg82

  • MD5

    3feb88a38d7e8692436aced0fbc5e798

  • SHA1

    e86aabad1cd6539e2e0cba7b4ae07d5b33fbde7f

  • SHA256

    f1a0b722f22d7bc45a48c1a33ff07adaf1143ea382f6125062fd560bdede74ad

  • SHA512

    e860a1052ebe3af9edb309bd303066de4ab77e116b6b81fd142e903a404ce77122453189acedc0008ded3640be570125833ed6e67673888bc7a2cd247d67facc

  • SSDEEP

    3072:CdclVo8bVCsZRb4k6m92rtby1l08ndSQGP:dnpR1X+tbyI8ndS

Score
8/10

Malware Config

Targets

    • Target

      f1a0b722f22d7bc45a48c1a33ff07adaf1143ea382f6125062fd560bdede74ad

    • Size

      173KB

    • MD5

      3feb88a38d7e8692436aced0fbc5e798

    • SHA1

      e86aabad1cd6539e2e0cba7b4ae07d5b33fbde7f

    • SHA256

      f1a0b722f22d7bc45a48c1a33ff07adaf1143ea382f6125062fd560bdede74ad

    • SHA512

      e860a1052ebe3af9edb309bd303066de4ab77e116b6b81fd142e903a404ce77122453189acedc0008ded3640be570125833ed6e67673888bc7a2cd247d67facc

    • SSDEEP

      3072:CdclVo8bVCsZRb4k6m92rtby1l08ndSQGP:dnpR1X+tbyI8ndS

    Score
    8/10
    • Modifies AppInit DLL entries

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks