Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ff995449039b12666054de503dc9fe5802b4a6e688277eeb06e8d36624dfd7a2_JC.zip

  • Size

    717KB

  • Sample

    231011-navg4scf75

  • MD5

    c8e8fff04c449d420104c91a801eedd2

  • SHA1

    a1d12806f0a171db9cd3fd552a491ebde6d8ae38

  • SHA256

    ff995449039b12666054de503dc9fe5802b4a6e688277eeb06e8d36624dfd7a2

  • SHA512

    691f45c1594c368a1b2c8ac24c0e1c17503478526cba144d5efcbccf987dffe3d1e04fe8921394d18dbfc0ae300791b8be4e621584b01228da1fb5a86a26e10c

  • SSDEEP

    12288:CzC9GWG/4wPJ9H/mxZHxLoNS42LaN5JNoIdvnQ9qngBO6dw0Jhx8dc1L:HTbwB9H/QXoS42LaN+IdqoqOowYh6dML

Score
7/10

Malware Config

Targets

    • Target

      ntp.doc

    • Size

      719KB

    • MD5

      db5491b172b6d1192d7bf6b569c44c9d

    • SHA1

      15f6be9c6a92eaa7e148d43e2fc7234ba3de9a84

    • SHA256

      639b49204f54f5038e12b053aba3cfc32111df6c8df97d220164db92c96114ed

    • SHA512

      98e1b8e7413651a16887976921e7d84beaed47462f93973fa2241250a7703407c44fc87c31b0e6c36d4be7959b0eabf705c9ead30e3f9305e53f03d85a445642

    • SSDEEP

      12288:ghRW/4wzJ/H/m3ZbxLoNS42LGZxBBmrfk9uDgBO6zwCJVD8dMBMB:yRrwN/H/M3oS42LGZxbmrfWKqO8wGV4X

    Score
    4/10
    • Target

      ntp.doc.lnk

    • Size

      2KB

    • MD5

      10a485b8c65306f6e992e68ab96bd6b6

    • SHA1

      3537832558906a95d1669ff8ec37b1016805ec88

    • SHA256

      93ef3ba4b4896b56850ef0a5f894155c163fe6d86fd5a70134b38ee1a7e2447a

    • SHA512

      713cfd75c6e5ae3945ac4498c85190bdd1c41e89fd74f6b2eb16fddf6fc85befcf8e1be37fc134ca56fc0501d72d7a745872f02a8ed4a5c470b4b4cc1a62eb01

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks