Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    stager.exe

  • Size

    1.9MB

  • Sample

    230719-p9djbafd85

  • MD5

    4ed2a8948a165b72025d5868a31a34c8

  • SHA1

    b25b9db66eefe9418bb398a8a5ffe4aebb7d4ff8

  • SHA256

    79d1a9ec049f598528e505aa71fdd68f01f7abcd8cb29c1e54ba018d239ae282

  • SHA512

    64411bb2f3510f26114d809409dd9af29238fb1c43ee005c08c3b00826be0bce0230ad26afc786961b659d8cc470f59ed12108b4a11056b702a516330bbec380

  • SSDEEP

    24576:GXjaqCL0DG3EZJOHVXGGUIHjNGxmKg7xf:GXjaADG3EWVd

Score
10/10

Malware Config

Targets

    • Target

      stager.exe

    • Size

      1.9MB

    • MD5

      4ed2a8948a165b72025d5868a31a34c8

    • SHA1

      b25b9db66eefe9418bb398a8a5ffe4aebb7d4ff8

    • SHA256

      79d1a9ec049f598528e505aa71fdd68f01f7abcd8cb29c1e54ba018d239ae282

    • SHA512

      64411bb2f3510f26114d809409dd9af29238fb1c43ee005c08c3b00826be0bce0230ad26afc786961b659d8cc470f59ed12108b4a11056b702a516330bbec380

    • SSDEEP

      24576:GXjaqCL0DG3EZJOHVXGGUIHjNGxmKg7xf:GXjaADG3EWVd

    Score
    10/10
    • UAC bypass

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks