Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tmp

  • Size

    375KB

  • Sample

    230420-m9fybsbe2t

  • MD5

    8c1fdfac9ebd282be0a85164120445ae

  • SHA1

    249647954c4d28aea0f517c6831102430cd9cd3f

  • SHA256

    340c89d0d81447bbe9855d625048e84b7226beb0bc9c4cbb7cc54891449d785a

  • SHA512

    d18cae71203ca7bf8e2ab85559932a0896a139237f4732fa382aac80f3cedf514d22dd17107173ae3706eb65b1dbe35fa98d4d772dd5a13979993b0624f22a3d

  • SSDEEP

    6144:PYa6Blr2Uv5LIYxmevmwwYztxy4yY0n4Av1ZYQ9yra/EpCsMjACt+wPp6g7m1Q/r:PYzlCqY7wjx04sZ1ycV8Q+wPtCC

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      375KB

    • MD5

      8c1fdfac9ebd282be0a85164120445ae

    • SHA1

      249647954c4d28aea0f517c6831102430cd9cd3f

    • SHA256

      340c89d0d81447bbe9855d625048e84b7226beb0bc9c4cbb7cc54891449d785a

    • SHA512

      d18cae71203ca7bf8e2ab85559932a0896a139237f4732fa382aac80f3cedf514d22dd17107173ae3706eb65b1dbe35fa98d4d772dd5a13979993b0624f22a3d

    • SSDEEP

      6144:PYa6Blr2Uv5LIYxmevmwwYztxy4yY0n4Av1ZYQ9yra/EpCsMjACt+wPp6g7m1Q/r:PYzlCqY7wjx04sZ1ycV8Q+wPtCC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks