Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SOA SETTLEMENT RECEIPT.exe

  • Size

    684KB

  • Sample

    231022-h3s7vsdh8v

  • MD5

    b381723baa76f866458dec454fcc9829

  • SHA1

    ca7089f9271534c664c23f641201516ddf13c81b

  • SHA256

    e7acff90a1aa9c97969814dd2161c54e1e2634b1b6879fbade91fd2649e7b819

  • SHA512

    632154c7e34ab69f3b8d9e5b306708a7d39fb3ff126d59be0dd7acfe3bb31d4ea97e5ea7387eb9519239137aa1e949d41ad78dca4d41eeabc8746aa0ea86eedb

  • SSDEEP

    12288:6Ak7s9/wMgHZRZpQj0XWMzp6DZInFuwhXc0miKcwsy58urKZI1i/mmDv:Nk7s9/Vg53u0mMziZInFhhs0miKG1aij

Score
7/10

Malware Config

Targets

    • Target

      SOA SETTLEMENT RECEIPT.exe

    • Size

      684KB

    • MD5

      b381723baa76f866458dec454fcc9829

    • SHA1

      ca7089f9271534c664c23f641201516ddf13c81b

    • SHA256

      e7acff90a1aa9c97969814dd2161c54e1e2634b1b6879fbade91fd2649e7b819

    • SHA512

      632154c7e34ab69f3b8d9e5b306708a7d39fb3ff126d59be0dd7acfe3bb31d4ea97e5ea7387eb9519239137aa1e949d41ad78dca4d41eeabc8746aa0ea86eedb

    • SSDEEP

      12288:6Ak7s9/wMgHZRZpQj0XWMzp6DZInFuwhXc0miKcwsy58urKZI1i/mmDv:Nk7s9/Vg53u0mMziZInFhhs0miKG1aij

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks