Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

test.bat

windows7-x64

1

test.bat

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.zip

  • Size

    12KB

  • Sample

    230317-z32mnsca8w

  • MD5

    1e60b9ca188e8e0b86c8ce12ad105084

  • SHA1

    b7e6a2952382b90ba00b3d11be7a22f5dc7d071b

  • SHA256

    dca8f8ce0a652c81fc9894b102feb8099366a2f0ba64892290c46a2605c2c52b

  • SHA512

    567ce4d5561b690d61fa1698381e4b1b0a6d2a46a441741a8debf5dc0da3bbdd4be1274b36376396d680593280c57e4f77f7aa408b21bc6fdf986a59874b92d8

  • SSDEEP

    384:0d3evjMsWI4mQ28W7vURXsaFf25uu+mUv2GDmVlvxW/A8GOxE:OaMbI8HpFfAuUGCVlIxE

Score
10/10
turianpersistence

Malware Config

Extracted

Family

turian

C2

update.adboeonline.net

Targets

    • Target

      test.bat

    • Size

      63B

    • MD5

      5edcff91edc49be050b96a68f68f95bd

    • SHA1

      b97dde35f636c022b4698172fafa2137d5c9d79f

    • SHA256

      621814b35e92dabd039eeddb511a1325c98bf1330c0fb588f6bff314bfd83e43

    • SHA512

      001906c256cfa9204180dd1332c3289c8bb03f76e4a28407f36dde89c35fb0f791340d6de8b14698271c05832a64d6ebc1c15bef2c382b7dd9b00c1b67b69316

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks