Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    RFQ # 1045981 - MAA_D Plant Project r01.exe

  • Size

    875KB

  • Sample

    230613-jx9hbsfe29

  • MD5

    ac256a867183ec9f1a370bc41b58015d

  • SHA1

    aaf4813c5870ff0882a4453904f8533db69bea75

  • SHA256

    13c73dff53867a75126ec548cad96b47a82f412dfc347b7b68c97fbbdb33d818

  • SHA512

    b09f63e657ca5ed04724cfe36e83cc62952e3dbdeb929f9e4ac3e9167573fa569a561a0cd2c3575c2f77349ea793c808acbd61f941bf7e6e8dd512f0f46cb760

  • SSDEEP

    24576:B1gG1tCueiqrBvclUBhDrznW8OAqZDag49G6D3f8+8/Wi0:vgqtCDiqrhhznHWZODI6D3U+bi0

Score
7/10

Malware Config

Targets

    • Target

      RFQ # 1045981 - MAA_D Plant Project r01.exe

    • Size

      875KB

    • MD5

      ac256a867183ec9f1a370bc41b58015d

    • SHA1

      aaf4813c5870ff0882a4453904f8533db69bea75

    • SHA256

      13c73dff53867a75126ec548cad96b47a82f412dfc347b7b68c97fbbdb33d818

    • SHA512

      b09f63e657ca5ed04724cfe36e83cc62952e3dbdeb929f9e4ac3e9167573fa569a561a0cd2c3575c2f77349ea793c808acbd61f941bf7e6e8dd512f0f46cb760

    • SSDEEP

      24576:B1gG1tCueiqrBvclUBhDrznW8OAqZDag49G6D3f8+8/Wi0:vgqtCDiqrhhznHWZODI6D3U+bi0

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks