Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    093e57286e10c4e666db46cd80e83c20

  • Size

    27KB

  • Sample

    231230-bakaxsfhf6

  • MD5

    093e57286e10c4e666db46cd80e83c20

  • SHA1

    f9eceb549e7c6f3609da0f354b65c9b5eb68d0dc

  • SHA256

    a2e97424599065a0b2f1c25f3881d0f42ba7abd4750ab6b682fb524a3834eaec

  • SHA512

    ca362631cf58b3f0ee082a67c57c6097aca4a1e8e2f4039b1fcf60202a1429086516ed2797b4e5a56c7d816ef4ef23939ca14d114fbf9dcefe581f87be64d0c2

  • SSDEEP

    768:81BcNG1uZNMVPUNHDejyRnFm0/TKKodowr:8GpHMKlnUuydo8

Score
8/10

Malware Config

Targets

    • Target

      093e57286e10c4e666db46cd80e83c20

    • Size

      27KB

    • MD5

      093e57286e10c4e666db46cd80e83c20

    • SHA1

      f9eceb549e7c6f3609da0f354b65c9b5eb68d0dc

    • SHA256

      a2e97424599065a0b2f1c25f3881d0f42ba7abd4750ab6b682fb524a3834eaec

    • SHA512

      ca362631cf58b3f0ee082a67c57c6097aca4a1e8e2f4039b1fcf60202a1429086516ed2797b4e5a56c7d816ef4ef23939ca14d114fbf9dcefe581f87be64d0c2

    • SSDEEP

      768:81BcNG1uZNMVPUNHDejyRnFm0/TKKodowr:8GpHMKlnUuydo8

    Score
    8/10
    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks