Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    A01001166_2023-06-28_08_03_26.zip

  • Size

    75KB

  • Sample

    230628-tp9s8sbc4w

  • MD5

    03bbbac7b8addb96aa34297fa1cac973

  • SHA1

    12810facf0a115b1c8a902396f768814d0ea2b45

  • SHA256

    f34989adb1e41868f843d32608b7b8132a1687ceba6b846c9cfe649496bc5ddc

  • SHA512

    9782265dd6baa39f8ae6f8c77242777bcb0cb4cfe9e3b2bf83047cad1c8e0fac31e778533fef64b2673221d5b216c1eeeebb2f29c47792f39a4fcbfeacd34d9d

  • SSDEEP

    1536:NB8x+QEDVvTt4ItXhvbQ0MgG9R+hR7xKuxGne3aQ6W9AtDELDS4Tyvj:jBPRZ4udbcR+Iuw0ODE3Sp

Malware Config

Targets

    • Target

      Device/HarddiskVolume3/Users/jlleclair/Downloads/Setup.exe

    • Size

      107KB

    • MD5

      4a60fcd5e830a9df28c41f7c922a0b98

    • SHA1

      b6dbd6d45425acdcfdeea9be491732e0fd06ee00

    • SHA256

      a09e7b42dc212c4b22900edeaa3b9bfdc27f197b59bcc7821f0821ee16141063

    • SHA512

      f3752b7c66366d676faaaf580ac10f278d16ea7f6cb380671ab4fad529ccf7933ea9deadb061369cf26080a95f5b1cfc3482abf491100eb881d3c01435b705d9

    • SSDEEP

      1536:P/T2X/jN2vxZz0DTHUpou4J7CkbuxE+1zyYCDtpXOr9m5+HMVKNL8WijBSeiQH:PbG7N2kDTHUpouOedPzy5n+7byjBBrH

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks