Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    04bc25b64fef7a482500b3ca966e2d08ee2ba45b4493db70cb24e66eea965f43

  • Size

    259KB

  • Sample

    230329-w1llwsba6x

  • MD5

    a98f0fd7f830e6c6514d4b8cc9934743

  • SHA1

    656ea5d51323b7929bc57c5f8b3723b5e026d657

  • SHA256

    04bc25b64fef7a482500b3ca966e2d08ee2ba45b4493db70cb24e66eea965f43

  • SHA512

    09aea433725609854a2cac4465412f55bc5364129fa0ad914b050f6a8a3e70520b6b4d3454a3af4795b695a5b2e591d04557a1a5e6cc855e24580da061e6cc88

  • SSDEEP

    6144:vYa6hrIai2SNrr+/zyabPz4WxLxqJjg/SaSzt7T/U:vYzrZiTrr+eab9xLOVaE/U

Score
7/10

Malware Config

Targets

    • Target

      04bc25b64fef7a482500b3ca966e2d08ee2ba45b4493db70cb24e66eea965f43

    • Size

      259KB

    • MD5

      a98f0fd7f830e6c6514d4b8cc9934743

    • SHA1

      656ea5d51323b7929bc57c5f8b3723b5e026d657

    • SHA256

      04bc25b64fef7a482500b3ca966e2d08ee2ba45b4493db70cb24e66eea965f43

    • SHA512

      09aea433725609854a2cac4465412f55bc5364129fa0ad914b050f6a8a3e70520b6b4d3454a3af4795b695a5b2e591d04557a1a5e6cc855e24580da061e6cc88

    • SSDEEP

      6144:vYa6hrIai2SNrr+/zyabPz4WxLxqJjg/SaSzt7T/U:vYzrZiTrr+eab9xLOVaE/U

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks