Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Poison-key-WorkInk-Installer_511221.exe

  • Size

    3.2MB

  • Sample

    230705-wpq28sgd5z

  • MD5

    a47ad9d933d9ba6a8d9fedc877542f03

  • SHA1

    e099a51c5f1bf2ee6f111ebec8b5110a55b5e791

  • SHA256

    ec9e2a007d0189a4efafc83efea992249e36b5afc8cceca18f72f162a7a5dca1

  • SHA512

    b0ae1cf56f8306190b2718547017ca67a529e5c6e4cb626406e0c303c774ec87ec0bc5a92cf0780f535facb621e2729e4fb900ad879a9d287baa51c2ecdcd41f

  • SSDEEP

    49152:Xo/1NA5Bneq5l7IgHsJQ3nZeSr7S/VaKt+P3FO1j7dRKSXTLPcdh3:Xo87IHQ3cwtij7d3XPcdt

Malware Config

Targets

    • Target

      Poison-key-WorkInk-Installer_511221.exe

    • Size

      3.2MB

    • MD5

      a47ad9d933d9ba6a8d9fedc877542f03

    • SHA1

      e099a51c5f1bf2ee6f111ebec8b5110a55b5e791

    • SHA256

      ec9e2a007d0189a4efafc83efea992249e36b5afc8cceca18f72f162a7a5dca1

    • SHA512

      b0ae1cf56f8306190b2718547017ca67a529e5c6e4cb626406e0c303c774ec87ec0bc5a92cf0780f535facb621e2729e4fb900ad879a9d287baa51c2ecdcd41f

    • SSDEEP

      49152:Xo/1NA5Bneq5l7IgHsJQ3nZeSr7S/VaKt+P3FO1j7dRKSXTLPcdh3:Xo87IHQ3cwtij7d3XPcdt

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks