Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46

  • Size

    268KB

  • Sample

    221206-mw3j6sdh6y

  • MD5

    4dac0e5869e435924f182ff05bfc7c97

  • SHA1

    d8be893f9962d06135b74dd476fec934f6554e51

  • SHA256

    b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46

  • SHA512

    7db5321a918ecca1932e55a27fe561c4f6ad74c50c81d1ae219f46d3416f9f43d520204ccc26169a1ec0e272fba5826c4bf8d7264213bf0a8c16129bc9c39bc3

  • SSDEEP

    3072:szB4PSLslTg4ybwmZvuf+J0/93B2NJh7fG8/Tch62/b9F4gc2Qyl2mzGmf:UyTjybwmZvIk0+1G8Trgh5Cmf

Score
6/10

Malware Config

Targets

    • Target

      b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46

    • Size

      268KB

    • MD5

      4dac0e5869e435924f182ff05bfc7c97

    • SHA1

      d8be893f9962d06135b74dd476fec934f6554e51

    • SHA256

      b09d504fadbc0a0788b9e710d07aaf9d0cf70ea3d3e7b1c4f5cb917130eb4e46

    • SHA512

      7db5321a918ecca1932e55a27fe561c4f6ad74c50c81d1ae219f46d3416f9f43d520204ccc26169a1ec0e272fba5826c4bf8d7264213bf0a8c16129bc9c39bc3

    • SSDEEP

      3072:szB4PSLslTg4ybwmZvuf+J0/93B2NJh7fG8/Tch62/b9F4gc2Qyl2mzGmf:UyTjybwmZvIk0+1G8Trgh5Cmf

    Score
    6/10
    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks