Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a93351aaee3ad5b5e34ef555912315cc7beab40b4ac0d20977b2f8e7e09a92a8

  • Size

    9.6MB

  • Sample

    231121-gs7f3acg38

  • MD5

    73d6fd5f282acd34b59bce59153fbf93

  • SHA1

    39ead17bbc7bc3f5e1fd43311e73fe808366928d

  • SHA256

    a93351aaee3ad5b5e34ef555912315cc7beab40b4ac0d20977b2f8e7e09a92a8

  • SHA512

    c8185c7a3efa51aa4a7869dc7348fc1b9283f6761dcdc6dbc6bef7a5acb465336f9cea2d39b95fd0d526fb4435d8f3730ce4a81cd60d8939ed190ba052ce69ad

  • SSDEEP

    196608:CrIYWV5l08p/2iFtpPfwCBk0FNhYfU8PwU0/7J3EagHs7LS+KTnlC9Jr:CvWVn//5F7PfwCB7FbQXwhlL/LSDTS9

Score
7/10

Malware Config

Targets

    • Target

      MobaXterm/MobaXterm_CHS.exe

    • Size

      13.2MB

    • MD5

      bf2a4dd4ce5460619fc06598331e09fc

    • SHA1

      8ab85212717c5cfcf94bf6e65af4a01b22a92fe3

    • SHA256

      0233cfde67a859e82e35dd9ccc3b6b9536d99f9dda04dc625985fa9d1cd5ecc3

    • SHA512

      6a8e3bba9562734ec173705f96c0aa9981eed9d146adcb9eed4e4661faca9c88b5ce49b59adaec1e9c4901bf9fc607aeb22d00780e4c4c67763aa4e9156c7856

    • SSDEEP

      196608:u96otEmKakt0ZWMwmlbR0Gj4qyPL9iX68ZgYe/RJ/0wW9sZHYycPdNGRrz:HuWyV/jlgZw/gr9hJHY/PMf

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      MobaXterm/ips2.rules

    • Size

      618KB

    • MD5

      56c066e15aa273247708ed4affb0e65e

    • SHA1

      d4ddb57c5bcd6e330aef7ea06639334245abc497

    • SHA256

      283b5656f6cb0bf43d19d4bfaf89498d9028be1f5092f9e60c4f484afd18cdf8

    • SHA512

      6f29bde98f4b8a402b8561fe54c7112318efe65572d83efb2c6f8864e8fefb92279ed9cdab7baabe7b51482170c8ef3583d4f02fe6601bdede82ba13ef3073c7

    • SSDEEP

      6144:PoHiVNlp85+mBhHRYfY8H+LOF49dOyRG0xw30/LHsPN7FT2qy:PGSmJuDHvFK8yRG0xw30/LHsPNhT2qy

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks