Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec

  • Size

    33KB

  • Sample

    221204-rk585sbb6t

  • MD5

    72d83b61847efab6d09999506a4d7a18

  • SHA1

    408dcace71fed3d6ec7c8f628ec84cbdebd7e108

  • SHA256

    ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec

  • SHA512

    5d7b86aa56f2c1491bff40bb8e8c0180727f65ecf86785a25fc03cfd33cd655364743bc322357072eeca9e25ec8832466291172339dfd16376fcc92550044e33

  • SSDEEP

    768:BDtodNkDnNQqajgp5yWmeF6qQ4wRbx6nV:BR9DnNQqacJmeF7gbx6nV

Score
8/10

Malware Config

Targets

    • Target

      ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec

    • Size

      33KB

    • MD5

      72d83b61847efab6d09999506a4d7a18

    • SHA1

      408dcace71fed3d6ec7c8f628ec84cbdebd7e108

    • SHA256

      ddb9fbe1466215b7fe544f6cdb700c36afbf8c79c76b9b0e27cf16efaa71c5ec

    • SHA512

      5d7b86aa56f2c1491bff40bb8e8c0180727f65ecf86785a25fc03cfd33cd655364743bc322357072eeca9e25ec8832466291172339dfd16376fcc92550044e33

    • SSDEEP

      768:BDtodNkDnNQqajgp5yWmeF6qQ4wRbx6nV:BR9DnNQqacJmeF7gbx6nV

    Score
    8/10
    • Executes dropped EXE

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks