Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tmp

  • Size

    6.0MB

  • Sample

    230519-fgv38afb85

  • MD5

    4c2b59cbcbebeb321ac4a0def370c0dd

  • SHA1

    3e8935a7382d1f8df799f3214ac10a267fcf287c

  • SHA256

    74ad99a6bfaa5d10112289bb55fb71bc90e5106f4e1591ad387e4ad381ef2caf

  • SHA512

    3da098eade2ba141b3852246e798692f793d4da1b54d0f09ee2ddbe24cd6626cced1556d421f3f033eca1ce7359507785a047e20a6c140190e6fa276041ceed6

  • SSDEEP

    98304:TXz+Cz0GdAq9q59bl1v+QbSmNapj6vjGrOTDHenGmXcDgFzFQqzC+/rC3+VyOE:jKXGdAq9q/bl5+QbNEd6Tren7eKFFzCz

Malware Config

Targets

    • Target

      tmp

    • Size

      6.0MB

    • MD5

      4c2b59cbcbebeb321ac4a0def370c0dd

    • SHA1

      3e8935a7382d1f8df799f3214ac10a267fcf287c

    • SHA256

      74ad99a6bfaa5d10112289bb55fb71bc90e5106f4e1591ad387e4ad381ef2caf

    • SHA512

      3da098eade2ba141b3852246e798692f793d4da1b54d0f09ee2ddbe24cd6626cced1556d421f3f033eca1ce7359507785a047e20a6c140190e6fa276041ceed6

    • SSDEEP

      98304:TXz+Cz0GdAq9q59bl1v+QbSmNapj6vjGrOTDHenGmXcDgFzFQqzC+/rC3+VyOE:jKXGdAq9q/bl5+QbNEd6Tren7eKFFzCz

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks