Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    17b7b01480949534c066aac80f8aba6a

  • Size

    255KB

  • Sample

    231230-n386zaech2

  • MD5

    17b7b01480949534c066aac80f8aba6a

  • SHA1

    b1213e9a18a4ef8c07d1021511f52284d5b74e6d

  • SHA256

    423100da5251a70d1ea1fb1ee5c83eb45e9812a83b3f440063d1c8c83f8cd7c0

  • SHA512

    e9588fb0ac8424831c5981784b0841b29cdf65983dc51801259a9f7c477b91017433012fcddc50524532dfc5101ce9423f30ae8c28a615cbf4524940e0d1f1c6

  • SSDEEP

    3072:ZYUb5QoJ4g+Ri+Zj6Iz1ZdW4SrO7FSVpjO:ZY7xh6SZI4z7FSVpS

Score
7/10

Malware Config

Targets

    • Target

      17b7b01480949534c066aac80f8aba6a

    • Size

      255KB

    • MD5

      17b7b01480949534c066aac80f8aba6a

    • SHA1

      b1213e9a18a4ef8c07d1021511f52284d5b74e6d

    • SHA256

      423100da5251a70d1ea1fb1ee5c83eb45e9812a83b3f440063d1c8c83f8cd7c0

    • SHA512

      e9588fb0ac8424831c5981784b0841b29cdf65983dc51801259a9f7c477b91017433012fcddc50524532dfc5101ce9423f30ae8c28a615cbf4524940e0d1f1c6

    • SSDEEP

      3072:ZYUb5QoJ4g+Ri+Zj6Iz1ZdW4SrO7FSVpjO:ZY7xh6SZI4z7FSVpS

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks