Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    OfficeSetup.exe

  • Size

    7.0MB

  • Sample

    230323-r9xcjaac8s

  • MD5

    07adcb1942238af49ffddb1bfebdc0b4

  • SHA1

    5a69972af991ef7b7f44ae1ea1d93ef45e19a74f

  • SHA256

    4a5c3925f2b5a6650af073e180f17357ccaa7c19aeef9e3f4fd6486a17a1772b

  • SHA512

    08f06af0b75077822215204fc32fc60667fccb49b74ec76f549655f7cb9668dd109b6ae6da0feae053b9b5693dc1982d80857492b771641827b1f761b8fe6f65

  • SSDEEP

    196608:cqq9dY2LVcIF20bI0fg4oMOLz3dNH+tJTwcuis:cqeY2ZF7I0oTMOHCjTwcLs

Score
7/10

Malware Config

Targets

    • Target

      OfficeSetup.exe

    • Size

      7.0MB

    • MD5

      07adcb1942238af49ffddb1bfebdc0b4

    • SHA1

      5a69972af991ef7b7f44ae1ea1d93ef45e19a74f

    • SHA256

      4a5c3925f2b5a6650af073e180f17357ccaa7c19aeef9e3f4fd6486a17a1772b

    • SHA512

      08f06af0b75077822215204fc32fc60667fccb49b74ec76f549655f7cb9668dd109b6ae6da0feae053b9b5693dc1982d80857492b771641827b1f761b8fe6f65

    • SSDEEP

      196608:cqq9dY2LVcIF20bI0fg4oMOLz3dNH+tJTwcuis:cqeY2ZF7I0oTMOHCjTwcLs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks