Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5

  • Size

    2.6MB

  • Sample

    221203-wvydhadc96

  • MD5

    8547c878787692870f6cb73ac772c4e6

  • SHA1

    ae44b0581d5c3bee317873cbf0e23044d45eac62

  • SHA256

    461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5

  • SHA512

    3c0528e914aa2c54bc2dc1f6c9ad71e10eb18c228be8ac77eabbfb71beaf277f4df8582fa491ab53631c20d220b644054646a2a8cc18073c2c5aea293617dd86

  • SSDEEP

    49152:G+pw97HhY6Hk009aeWyGitBdxPBJjXlapqwnLTWmOpQw1VW5qDASDTu5SZbNUI3L:GaQB3EVaLitBd14ptLTKMARyYkIL

Score
8/10

Malware Config

Targets

    • Target

      461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5

    • Size

      2.6MB

    • MD5

      8547c878787692870f6cb73ac772c4e6

    • SHA1

      ae44b0581d5c3bee317873cbf0e23044d45eac62

    • SHA256

      461f80a7835f6660005e184ceae6df4fa24807836ea4c355182e312131c326c5

    • SHA512

      3c0528e914aa2c54bc2dc1f6c9ad71e10eb18c228be8ac77eabbfb71beaf277f4df8582fa491ab53631c20d220b644054646a2a8cc18073c2c5aea293617dd86

    • SSDEEP

      49152:G+pw97HhY6Hk009aeWyGitBdxPBJjXlapqwnLTWmOpQw1VW5qDASDTu5SZbNUI3L:GaQB3EVaLitBd14ptLTKMARyYkIL

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks