Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0729d893aeb17d01a61877855d52e33c

  • Size

    48KB

  • Sample

    231229-3mm15agfdk

  • MD5

    0729d893aeb17d01a61877855d52e33c

  • SHA1

    37c44c6c8225a71eaf9506f1dddb8c0f2a288b85

  • SHA256

    c6164eb23e75fac6ccbf82e4729d6b6b7d04f456e6ed8e2d23abe1acb9583520

  • SHA512

    1c98736fa5865645ee06c63400c4f8090780f30c887d581066b410cae97519f5735be225e971ce339fca9171a900a9471aed9695bd8174080cd5a9a008376e6b

  • SSDEEP

    768:ljNEhmygYfsdYC7v+6wH9H7MfygXaDMFQXD7e:ljam+EeCX6NNDsQXD7

Score
10/10

Malware Config

Targets

    • Target

      0729d893aeb17d01a61877855d52e33c

    • Size

      48KB

    • MD5

      0729d893aeb17d01a61877855d52e33c

    • SHA1

      37c44c6c8225a71eaf9506f1dddb8c0f2a288b85

    • SHA256

      c6164eb23e75fac6ccbf82e4729d6b6b7d04f456e6ed8e2d23abe1acb9583520

    • SHA512

      1c98736fa5865645ee06c63400c4f8090780f30c887d581066b410cae97519f5735be225e971ce339fca9171a900a9471aed9695bd8174080cd5a9a008376e6b

    • SSDEEP

      768:ljNEhmygYfsdYC7v+6wH9H7MfygXaDMFQXD7e:ljam+EeCX6NNDsQXD7

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks