Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/03/2023, 14:35

230319-rx54xaag9w 10

19/03/2023, 14:28

230319-rs1nmaag7x 1

General

  • Target

    58a7cc3d-cbde-4fa7-a806-2e6e90105199.html

  • Size

    72KB

  • Sample

    230319-rx54xaag9w

  • MD5

    563777101470492e7601c9a2842aa020

  • SHA1

    76049d062dd75707a99061b5ee80183f7fafbcd0

  • SHA256

    1fa959c7acd71bfd0f97b81aab37a525e092db8a86854712987259d2e7cc3482

  • SHA512

    d8fd9857243e814fa8a23d0afe763b9bb3eb54c69536480bc9e96d4c79db87900a125dfb32a5a91f74be0b21cdd7fd25eedd05e5bf488e0c375a15ed8b0aa6dd

  • SSDEEP

    1536:JLjM1qyWRhtQNlNJa2UdOll3tvreyxeclJnTXpwe66H1pa0feMAAFNJ:FMwyihiDasl3VeyfKeXH1gW

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://shisyatnic.top/gatef1.php

Targets

    • Target

      58a7cc3d-cbde-4fa7-a806-2e6e90105199.html

    • Size

      72KB

    • MD5

      563777101470492e7601c9a2842aa020

    • SHA1

      76049d062dd75707a99061b5ee80183f7fafbcd0

    • SHA256

      1fa959c7acd71bfd0f97b81aab37a525e092db8a86854712987259d2e7cc3482

    • SHA512

      d8fd9857243e814fa8a23d0afe763b9bb3eb54c69536480bc9e96d4c79db87900a125dfb32a5a91f74be0b21cdd7fd25eedd05e5bf488e0c375a15ed8b0aa6dd

    • SSDEEP

      1536:JLjM1qyWRhtQNlNJa2UdOll3tvreyxeclJnTXpwe66H1pa0feMAAFNJ:FMwyihiDasl3VeyfKeXH1gW

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks