Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Awfoc.js

  • Size

    122KB

  • Sample

    230523-c3w1vsed3t

  • MD5

    be50c4c098db13db80a82013a2bc4af0

  • SHA1

    b7f55ceb418185804b9c608f3013e0b689f7b304

  • SHA256

    1be5de2f0e92e8bf59c86f12b25046843a360a9e1f984c98941c2dfb59fe3902

  • SHA512

    d66aed0bf548a37945e84948e7b85141d239968cf2b0f1f2d7a23c22bb50e9e9d841ebea72b0c015413185400b0f7aed64d89e00fa37dfea0fa06d502d343117

  • SSDEEP

    3072:pTQurW0ztewCmrXQY4tglfqbTLPJx7sS99xCLom:pZrW0ztCt+8TLPoiCLv

Score
8/10

Malware Config

Targets

    • Target

      Awfoc.js

    • Size

      122KB

    • MD5

      be50c4c098db13db80a82013a2bc4af0

    • SHA1

      b7f55ceb418185804b9c608f3013e0b689f7b304

    • SHA256

      1be5de2f0e92e8bf59c86f12b25046843a360a9e1f984c98941c2dfb59fe3902

    • SHA512

      d66aed0bf548a37945e84948e7b85141d239968cf2b0f1f2d7a23c22bb50e9e9d841ebea72b0c015413185400b0f7aed64d89e00fa37dfea0fa06d502d343117

    • SSDEEP

      3072:pTQurW0ztewCmrXQY4tglfqbTLPJx7sS99xCLom:pZrW0ztCt+8TLPoiCLv

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks