Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3fb2ea468d879582791fb74c6ef0898e45f62b2e22c6b6b1311def934957cde2.exe

  • Size

    305KB

  • Sample

    230401-ajax6sfh9x

  • MD5

    e9e8c070b34b395489a18bd9cc5cfe97

  • SHA1

    5822461d43129b2501ef1e963bd3b4bcc182e40d

  • SHA256

    3fb2ea468d879582791fb74c6ef0898e45f62b2e22c6b6b1311def934957cde2

  • SHA512

    44706890d8ad5d74f217f2b245f3ea84434b84082e253d39bba537f61832f94155b2e6be654b3069ae38050a790c7f3c457ecec6b03520f957ac1d1fa21d114e

  • SSDEEP

    6144:/Ya6KLv4nsx++b52HokQCkaDsR3XBoQV5KIWanleg/K7rfbiiGi:/Y0LvrJAHI7QYkmnlzS7rAi

Score
7/10

Malware Config

Targets

    • Target

      3fb2ea468d879582791fb74c6ef0898e45f62b2e22c6b6b1311def934957cde2.exe

    • Size

      305KB

    • MD5

      e9e8c070b34b395489a18bd9cc5cfe97

    • SHA1

      5822461d43129b2501ef1e963bd3b4bcc182e40d

    • SHA256

      3fb2ea468d879582791fb74c6ef0898e45f62b2e22c6b6b1311def934957cde2

    • SHA512

      44706890d8ad5d74f217f2b245f3ea84434b84082e253d39bba537f61832f94155b2e6be654b3069ae38050a790c7f3c457ecec6b03520f957ac1d1fa21d114e

    • SSDEEP

      6144:/Ya6KLv4nsx++b52HokQCkaDsR3XBoQV5KIWanleg/K7rfbiiGi:/Y0LvrJAHI7QYkmnlzS7rAi

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks