Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    O P E N .wsf

  • Size

    316KB

  • Sample

    230302-xc174sdh2w

  • MD5

    ac4385ffc9f0f005bd194486aed5c24f

  • SHA1

    161cdb625a9d8716ed61e16ce83136ee57d42753

  • SHA256

    21a73a39348f4021cd6af58996a821c9ffd0dc2f84a49ca9d2b754f2f504f950

  • SHA512

    262c953e0ccf1f9cc61ee36859b2fa9fb89d1debb33faa25168cd240096960b6f44513c8731ac92e81cf6f8e36680e666d3222f6ad0d2355640dafea1ef604b3

  • SSDEEP

    6144:lisXZjbwYByTQwxaexOQvqCu3eapoycGFyEJbel2ZJ5jBCPbJe5rJDp/RtZl80CM:limGpZP5fLycSVJilO10JedZx71sLgKQ

Score
8/10

Malware Config

Targets

    • Target

      O P E N .wsf

    • Size

      316KB

    • MD5

      ac4385ffc9f0f005bd194486aed5c24f

    • SHA1

      161cdb625a9d8716ed61e16ce83136ee57d42753

    • SHA256

      21a73a39348f4021cd6af58996a821c9ffd0dc2f84a49ca9d2b754f2f504f950

    • SHA512

      262c953e0ccf1f9cc61ee36859b2fa9fb89d1debb33faa25168cd240096960b6f44513c8731ac92e81cf6f8e36680e666d3222f6ad0d2355640dafea1ef604b3

    • SSDEEP

      6144:lisXZjbwYByTQwxaexOQvqCu3eapoycGFyEJbel2ZJ5jBCPbJe5rJDp/RtZl80CM:limGpZP5fLycSVJilO10JedZx71sLgKQ

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks