Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

  • Size

    152KB

  • Sample

    221203-ywmz9sfc61

  • MD5

    fad644ff815a163062309b3f4c921e8d

  • SHA1

    c0fcdfc18dfbaddf439c582e5661887d5bde0d14

  • SHA256

    eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

  • SHA512

    603434458633d95b084ad3876c5445a5b840e7a211b6aa9fcc99ab9e84ccd292f050f0101eb17af756426c4b70ad1c2772acbe0458c260d94551cddcb7486acb

  • SSDEEP

    3072:Urdsw3SLk8KvAmRPveYlUq/kzPi0gEr+YsBYPAZ1KHiLwcIaZ154oQZiEkV:ACLrEGaUq8iHEXsCJR8ZdWs

Score
10/10

Malware Config

Targets

    • Target

      eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

    • Size

      152KB

    • MD5

      fad644ff815a163062309b3f4c921e8d

    • SHA1

      c0fcdfc18dfbaddf439c582e5661887d5bde0d14

    • SHA256

      eb0b0aae02cdb9b7e089c1777c8b0812684999f0ad2494c8a7cb03c1654cdd6c

    • SHA512

      603434458633d95b084ad3876c5445a5b840e7a211b6aa9fcc99ab9e84ccd292f050f0101eb17af756426c4b70ad1c2772acbe0458c260d94551cddcb7486acb

    • SSDEEP

      3072:Urdsw3SLk8KvAmRPveYlUq/kzPi0gEr+YsBYPAZ1KHiLwcIaZ154oQZiEkV:ACLrEGaUq8iHEXsCJR8ZdWs

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks