Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    74b0867c8fc3815f610799cf461155a5

  • Size

    512KB

  • Sample

    231226-rhr9hadedl

  • MD5

    74b0867c8fc3815f610799cf461155a5

  • SHA1

    97bb34fdc3344d7cbfd9c6464b2c90e04aa40ef7

  • SHA256

    21b723ad3dce7aed63916e1e1f069909fda7a5fbb6bd5467f376f9cc4eb4f515

  • SHA512

    5858169330910eaa381dd70c668e583ef2845b9821b201a403d11deec4ffbdbf6c38e993e8f8e801ee88240eabe79a7fde9b1207310d404f302ca954e2b7a787

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E49:0+h9OY70z+warul3E49

Score
9/10

Malware Config

Targets

    • Target

      74b0867c8fc3815f610799cf461155a5

    • Size

      512KB

    • MD5

      74b0867c8fc3815f610799cf461155a5

    • SHA1

      97bb34fdc3344d7cbfd9c6464b2c90e04aa40ef7

    • SHA256

      21b723ad3dce7aed63916e1e1f069909fda7a5fbb6bd5467f376f9cc4eb4f515

    • SHA512

      5858169330910eaa381dd70c668e583ef2845b9821b201a403d11deec4ffbdbf6c38e993e8f8e801ee88240eabe79a7fde9b1207310d404f302ca954e2b7a787

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E49:0+h9OY70z+warul3E49

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks