Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1de0a76e4fcad4e2f7a7cfc8fb02cb5b2b64a99212e75fb883721430d8f065a

  • Size

    1.2MB

  • Sample

    221205-mjgryaef41

  • MD5

    e826dd93eaf42cb082606e37543e9bba

  • SHA1

    72062694acd03db50bb45e1da80500cc23171afe

  • SHA256

    a1de0a76e4fcad4e2f7a7cfc8fb02cb5b2b64a99212e75fb883721430d8f065a

  • SHA512

    6123e615b93657bb96fdb7442703186a1182ff61d44128217c2646073a0e154fd657be1282c35711c96ed3eff0d8a28bc98d88b94b97ce838ccfa43dbba036d5

  • SSDEEP

    24576:j0ygUZcPs1/qp0HGNJMIWYTGfArcmZUOVrB3a5H290J:joXPDypDYTZTZpVrL90

Malware Config

Targets

    • Target

      a1de0a76e4fcad4e2f7a7cfc8fb02cb5b2b64a99212e75fb883721430d8f065a

    • Size

      1.2MB

    • MD5

      e826dd93eaf42cb082606e37543e9bba

    • SHA1

      72062694acd03db50bb45e1da80500cc23171afe

    • SHA256

      a1de0a76e4fcad4e2f7a7cfc8fb02cb5b2b64a99212e75fb883721430d8f065a

    • SHA512

      6123e615b93657bb96fdb7442703186a1182ff61d44128217c2646073a0e154fd657be1282c35711c96ed3eff0d8a28bc98d88b94b97ce838ccfa43dbba036d5

    • SSDEEP

      24576:j0ygUZcPs1/qp0HGNJMIWYTGfArcmZUOVrB3a5H290J:joXPDypDYTZTZpVrL90

    • Windows security bypass

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Windows security modification

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks