Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    711f879bd56173691f22859195e0581b

  • Size

    80KB

  • Sample

    231226-qeecssghh6

  • MD5

    711f879bd56173691f22859195e0581b

  • SHA1

    f7dbaa37c5df8fa93dc4c524ab60bad97689a9b0

  • SHA256

    526d659f698077d5f6082872b74b5f4b328ee284a3ca406ff8cabc5a74c933bd

  • SHA512

    84708b3debddd9f341dd31773d85b0c16df8082933551b9d23b1caa89270f0bb9f9e908dc05ec03f43e8d8f9b52acd123926eb47a57888b542f774d35da414d5

  • SSDEEP

    1536:vQ7wLYvKGlTGQxguIxZTAwlpwFJ0T72mocT:4oYvrKxZfUFJ0T72mBT

Score
10/10

Malware Config

Targets

    • Target

      711f879bd56173691f22859195e0581b

    • Size

      80KB

    • MD5

      711f879bd56173691f22859195e0581b

    • SHA1

      f7dbaa37c5df8fa93dc4c524ab60bad97689a9b0

    • SHA256

      526d659f698077d5f6082872b74b5f4b328ee284a3ca406ff8cabc5a74c933bd

    • SHA512

      84708b3debddd9f341dd31773d85b0c16df8082933551b9d23b1caa89270f0bb9f9e908dc05ec03f43e8d8f9b52acd123926eb47a57888b542f774d35da414d5

    • SSDEEP

      1536:vQ7wLYvKGlTGQxguIxZTAwlpwFJ0T72mocT:4oYvrKxZfUFJ0T72mBT

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks