Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0060b0cacb62958a36e8bb45dec0c460

  • Size

    21KB

  • Sample

    231229-w2hlmahgbn

  • MD5

    0060b0cacb62958a36e8bb45dec0c460

  • SHA1

    a51e675caf10d21d34dbec50917bf3b6ebbae395

  • SHA256

    88f586130d62597d214f6152b04b78beee271c3096b44d6c50ecdb5f29a9b65e

  • SHA512

    b4a471f96c1537db96e555886d05812c91214133789409dc135e857ad26e3d9a7a3fec23f98f7cafa0538c87b2477c985010c7ede908a42586fbfa61cbc3497a

  • SSDEEP

    384:xtmhqUNnSObO56sMzRgKUdctWIp1RYYUksezm73gFxyuM3wxi/:WhqUNSObOsPMEFSjbe5i/

Score
7/10

Malware Config

Targets

    • Target

      0060b0cacb62958a36e8bb45dec0c460

    • Size

      21KB

    • MD5

      0060b0cacb62958a36e8bb45dec0c460

    • SHA1

      a51e675caf10d21d34dbec50917bf3b6ebbae395

    • SHA256

      88f586130d62597d214f6152b04b78beee271c3096b44d6c50ecdb5f29a9b65e

    • SHA512

      b4a471f96c1537db96e555886d05812c91214133789409dc135e857ad26e3d9a7a3fec23f98f7cafa0538c87b2477c985010c7ede908a42586fbfa61cbc3497a

    • SSDEEP

      384:xtmhqUNnSObO56sMzRgKUdctWIp1RYYUksezm73gFxyuM3wxi/:WhqUNSObOsPMEFSjbe5i/

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks