Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.Win32.RATX-gen.5138.32043

  • Size

    782KB

  • Sample

    231115-bnxheaba9t

  • MD5

    9bb7f3b0c32cc58c27054de628206cee

  • SHA1

    5fd5e46dc9a53b5af49fcac45f52d3ccd60114b4

  • SHA256

    a999fa0b2c139c85ebb6a33cc1785777a333ee9b491ca696d776887f6d0400bc

  • SHA512

    fb21b4e0c1466c16e75b28e716c13b000c3a5a093e1693f73806520522833618904ec5968f3c57a9264159002f34738c78e356eb06aaccd8ba95f047198e500e

  • SSDEEP

    12288:DSprtFnXkIxN/9PCfsC6jf0ftLoydvr8yj2+/DV+3:6pF0AN/S2fstsyw+

Score
7/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.RATX-gen.5138.32043

    • Size

      782KB

    • MD5

      9bb7f3b0c32cc58c27054de628206cee

    • SHA1

      5fd5e46dc9a53b5af49fcac45f52d3ccd60114b4

    • SHA256

      a999fa0b2c139c85ebb6a33cc1785777a333ee9b491ca696d776887f6d0400bc

    • SHA512

      fb21b4e0c1466c16e75b28e716c13b000c3a5a093e1693f73806520522833618904ec5968f3c57a9264159002f34738c78e356eb06aaccd8ba95f047198e500e

    • SSDEEP

      12288:DSprtFnXkIxN/9PCfsC6jf0ftLoydvr8yj2+/DV+3:6pF0AN/S2fstsyw+

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks