Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Order specification.r11.rar

  • Size

    732KB

  • Sample

    230202-phr8dsab61

  • MD5

    7ed80e2f37b2e12b922e31851f41f1ed

  • SHA1

    1d3e442d3fe740f6d006eff4bb7b3abaa4c21e7e

  • SHA256

    d89509155d34dc8896fbf452372913ba12d9cc2cd3ca683e1fb64ede9f8fa532

  • SHA512

    d2115a50b54611b8a4b46165c61ec32e634ed85e17c26359f425f15073d23f02790d0b6fccfedb29d344010bce82b6fa52ce838ca4163842bed44b7fe730dd68

  • SSDEEP

    12288:bj1is9tkXQytmXfBAhpgInQAUj39TiAIUAB4ULvWS3uviI7wUzzYoKGGsFCOxK4J:Q02XAKMI7Ydi0ovWVv5k/0FC8K4bB5pf

Score
7/10

Malware Config

Targets

    • Target

      Order specification.exe

    • Size

      911KB

    • MD5

      6e4618e85f1366a3a526496f6537af89

    • SHA1

      b1b1c0191b8b0043828ba04bfb91b5f41903459a

    • SHA256

      85f9e2436c4b4743d0d509dfafeaba63bc46848a31053ffb00d35987fade8fda

    • SHA512

      bf02ad607b2e778d5a8dff8321d7f906cb749e0f3f3e29c780bbb74bd713a01bbcf7b7c01b79da09727220d11cb0c2d2ef5ad274d883cba73bca9bb799860b79

    • SSDEEP

      24576:Nrg6F0xMiBlOMp8vj/Vt4Uz8nTTgIdqG4yPa:3Wielf8vjdtBzakIm

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks