Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    28a527cbd650bf3317c7a1e4a1f49cb0

  • Size

    65KB

  • Sample

    231225-spcytsgga8

  • MD5

    28a527cbd650bf3317c7a1e4a1f49cb0

  • SHA1

    771ed820c33b3cfa083c9a42793eefde5e944682

  • SHA256

    d5a3d06ac6a8c9adc98332a6d6318f4c8975d3993554fdb9bbcf17ab4aa57d10

  • SHA512

    3711abaf9599af9eb301deaad641939b2820c8888b63dbbb0343050f71dae649130609d288c142249a96647578b5001e915791efdfa65d43b5f79f9ab6ef7ae4

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/o9:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gn

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      28a527cbd650bf3317c7a1e4a1f49cb0

    • Size

      65KB

    • MD5

      28a527cbd650bf3317c7a1e4a1f49cb0

    • SHA1

      771ed820c33b3cfa083c9a42793eefde5e944682

    • SHA256

      d5a3d06ac6a8c9adc98332a6d6318f4c8975d3993554fdb9bbcf17ab4aa57d10

    • SHA512

      3711abaf9599af9eb301deaad641939b2820c8888b63dbbb0343050f71dae649130609d288c142249a96647578b5001e915791efdfa65d43b5f79f9ab6ef7ae4

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/o9:59Ry98guHVBqqg2bcruzUHmLKeMMU7Gn

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks