Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

4b02b3d451...03.lnk

windows7-x64

3

4b02b3d451...03.lnk

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b02b3d451d0723c892760dc618433603287e7858474ef8ca42352e06ff60d03.lnk

  • Size

    523KB

  • Sample

    231222-pcqglscac8

  • MD5

    199a9ff6c65f14f7ab95639c1c7106fd

  • SHA1

    548873399f86d22f90118199fdc20e084c4c2258

  • SHA256

    4b02b3d451d0723c892760dc618433603287e7858474ef8ca42352e06ff60d03

  • SHA512

    e145b4d06e2c6ec3f82686c495eaab917f0525fbff85961247b6fe0be5cc773e6d86aa84da03df7f9a6a5f304bd37398e659b1676626489a2569abfb20970a31

  • SSDEEP

    12:8hlKm/VnEXvk44X3ojsqzKtnWNt2eUcCsvXemCKeX5yXOlL6EWKDiNL4t2YlJZa:8hptnHYVKVWue/CWOmC7JLha5+

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://cw95649.tw1.ru/spHTA.hta

Targets

    • Target

      4b02b3d451d0723c892760dc618433603287e7858474ef8ca42352e06ff60d03.lnk

    • Size

      523KB

    • MD5

      199a9ff6c65f14f7ab95639c1c7106fd

    • SHA1

      548873399f86d22f90118199fdc20e084c4c2258

    • SHA256

      4b02b3d451d0723c892760dc618433603287e7858474ef8ca42352e06ff60d03

    • SHA512

      e145b4d06e2c6ec3f82686c495eaab917f0525fbff85961247b6fe0be5cc773e6d86aa84da03df7f9a6a5f304bd37398e659b1676626489a2569abfb20970a31

    • SSDEEP

      12:8hlKm/VnEXvk44X3ojsqzKtnWNt2eUcCsvXemCKeX5yXOlL6EWKDiNL4t2YlJZa:8hptnHYVKVWue/CWOmC7JLha5+

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks