Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0e02459952966c6778a837f857002b38f02361bf2b46049b3bc655ed953017e

  • Size

    37KB

  • Sample

    221205-vqg1aahg56

  • MD5

    4c5c9c0eecc5485920c42529c1772b0e

  • SHA1

    5630a6dc668c840b6cef7321a0ff4d9732153736

  • SHA256

    a0e02459952966c6778a837f857002b38f02361bf2b46049b3bc655ed953017e

  • SHA512

    cd3292f8097275abc3475db9f7d6a2154e55866d85664ab2c922705840f77b06339d16e318186f40e6bf3e6fb0bdfc097aadf58583e41495c2f9e6be967319e2

  • SSDEEP

    768:XQFTDurYyURDrAzfGdIYRt2LuX7oHm93SN/+kfKZ8ka:XQFTvVzt2LuOsIG2KZ8ka

Score
8/10

Malware Config

Targets

    • Target

      a0e02459952966c6778a837f857002b38f02361bf2b46049b3bc655ed953017e

    • Size

      37KB

    • MD5

      4c5c9c0eecc5485920c42529c1772b0e

    • SHA1

      5630a6dc668c840b6cef7321a0ff4d9732153736

    • SHA256

      a0e02459952966c6778a837f857002b38f02361bf2b46049b3bc655ed953017e

    • SHA512

      cd3292f8097275abc3475db9f7d6a2154e55866d85664ab2c922705840f77b06339d16e318186f40e6bf3e6fb0bdfc097aadf58583e41495c2f9e6be967319e2

    • SSDEEP

      768:XQFTDurYyURDrAzfGdIYRt2LuX7oHm93SN/+kfKZ8ka:XQFTvVzt2LuOsIG2KZ8ka

    Score
    8/10
    • Adds policy Run key to start application

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks