Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb

  • Size

    555KB

  • Sample

    221215-tr2weacg67

  • MD5

    eff424376edca5680b90ea9fedad163d

  • SHA1

    3c13c1e54d2d7991c1c3452ae89888a8e7a47763

  • SHA256

    48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb

  • SHA512

    5acc904da2b8f3371a5696194b4a6fa7c3e735b0bbe74a507efb56782e6fc604f9bd3abf7a3af5f57325c7115de3ac9cd499086430d0d4fbe81b46a57539f068

  • SSDEEP

    12288:Y4LNVuczF0QdQsJlehKRwYgJcViFYvgNv+5jGbRFhVoj4d:xvn2sJlBRwYgJcVNE+5jU8j4

Malware Config

Targets

    • Target

      48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb

    • Size

      555KB

    • MD5

      eff424376edca5680b90ea9fedad163d

    • SHA1

      3c13c1e54d2d7991c1c3452ae89888a8e7a47763

    • SHA256

      48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb

    • SHA512

      5acc904da2b8f3371a5696194b4a6fa7c3e735b0bbe74a507efb56782e6fc604f9bd3abf7a3af5f57325c7115de3ac9cd499086430d0d4fbe81b46a57539f068

    • SSDEEP

      12288:Y4LNVuczF0QdQsJlehKRwYgJcViFYvgNv+5jGbRFhVoj4d:xvn2sJlBRwYgJcVNE+5jU8j4

    • Black Basta

      A ransomware family targeting Windows and Linux ESXi first seen in February 2022.

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Modifies boot configuration data using bcdedit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks