Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1d79183494f4d8dd4a7425e90cc20dd6

  • Size

    512KB

  • Sample

    231230-1mjycsefgr

  • MD5

    1d79183494f4d8dd4a7425e90cc20dd6

  • SHA1

    265ae6ebe9057de09ef3f391dc30403d07eeca04

  • SHA256

    05c426aafe413993999e740f8f6a3c492e6d05ee4dddc7509a1540faf132d46c

  • SHA512

    5693f0662d2ef36aa921b8f6f5c26e22cfac1dcbe1bf7a41f733ac2e53adc9b88c415aa18e13ab85e6af7428642a3292acf4cc0c39a0e51138c749d2a6bd15bb

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E42:0+h9OY70z+warul3E42

Score
9/10

Malware Config

Targets

    • Target

      1d79183494f4d8dd4a7425e90cc20dd6

    • Size

      512KB

    • MD5

      1d79183494f4d8dd4a7425e90cc20dd6

    • SHA1

      265ae6ebe9057de09ef3f391dc30403d07eeca04

    • SHA256

      05c426aafe413993999e740f8f6a3c492e6d05ee4dddc7509a1540faf132d46c

    • SHA512

      5693f0662d2ef36aa921b8f6f5c26e22cfac1dcbe1bf7a41f733ac2e53adc9b88c415aa18e13ab85e6af7428642a3292acf4cc0c39a0e51138c749d2a6bd15bb

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E42:0+h9OY70z+warul3E42

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks