Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5b8d865aff0cf1ec17a62dea3eb254e5

  • Size

    270KB

  • Sample

    231226-hyh64abfd5

  • MD5

    5b8d865aff0cf1ec17a62dea3eb254e5

  • SHA1

    141f27590bc3daee10de594466622249a7730746

  • SHA256

    6c8e8ba9cad3f96aeb6add6a6e269f9a50434bb9a55c0ec64b559c2dbb1da24c

  • SHA512

    19eba9ed70f3f4375407a256aaf715a56688f0b6cdbfa24681b09345f45aed6629a3ee231bf27f0c88bab89c2bc2dd05e231e7876687d9a4a828c5d8a52deafb

  • SSDEEP

    3072:ep+iCYEphBVgcPvn6RpGlgsr5/0u1cSGo2cbvlvSsoT8LmjcV+lDFWCUwmsMNDeD:FiwvX66lf5jCoBvosUbYsMND/WG7Av9

Malware Config

Targets

    • Target

      5b8d865aff0cf1ec17a62dea3eb254e5

    • Size

      270KB

    • MD5

      5b8d865aff0cf1ec17a62dea3eb254e5

    • SHA1

      141f27590bc3daee10de594466622249a7730746

    • SHA256

      6c8e8ba9cad3f96aeb6add6a6e269f9a50434bb9a55c0ec64b559c2dbb1da24c

    • SHA512

      19eba9ed70f3f4375407a256aaf715a56688f0b6cdbfa24681b09345f45aed6629a3ee231bf27f0c88bab89c2bc2dd05e231e7876687d9a4a828c5d8a52deafb

    • SSDEEP

      3072:ep+iCYEphBVgcPvn6RpGlgsr5/0u1cSGo2cbvlvSsoT8LmjcV+lDFWCUwmsMNDeD:FiwvX66lf5jCoBvosUbYsMND/WG7Av9

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks