Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    111da61f61dc6b7425f5b6b46de36baa

  • Size

    293KB

  • Sample

    231230-g9xm7afac6

  • MD5

    111da61f61dc6b7425f5b6b46de36baa

  • SHA1

    6315924ed224dcc3b6bdfd901a4bba867b72dfb9

  • SHA256

    fc974bb1d58f640869da192d76d7600eeec7e766375066774047f93e8062918a

  • SHA512

    849228e0a0957669c4e0bcb19a563247109407537a0d7e7b860d4758c0e82e0964ebfdcc5f95cc2242bbfba0edbb32e0d131d648340985d940d4305058381052

  • SSDEEP

    6144:wkLcp+1ahqFTCNRExkjn+P55VseLuVLg78/J5R1oVEWSdb3z7ZSS:wjyahqKRExaY0eLuVsA/J5rumz/ES

Score
7/10

Malware Config

Targets

    • Target

      111da61f61dc6b7425f5b6b46de36baa

    • Size

      293KB

    • MD5

      111da61f61dc6b7425f5b6b46de36baa

    • SHA1

      6315924ed224dcc3b6bdfd901a4bba867b72dfb9

    • SHA256

      fc974bb1d58f640869da192d76d7600eeec7e766375066774047f93e8062918a

    • SHA512

      849228e0a0957669c4e0bcb19a563247109407537a0d7e7b860d4758c0e82e0964ebfdcc5f95cc2242bbfba0edbb32e0d131d648340985d940d4305058381052

    • SSDEEP

      6144:wkLcp+1ahqFTCNRExkjn+P55VseLuVLg78/J5R1oVEWSdb3z7ZSS:wjyahqKRExaY0eLuVsA/J5rumz/ES

    Score
    7/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks