Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    259d058aaa27ed76f7b7127fbcfdff7a

  • Size

    512KB

  • Sample

    231231-dj5dkadecm

  • MD5

    259d058aaa27ed76f7b7127fbcfdff7a

  • SHA1

    449687785d6a5cab667e853be1ca9e7e658658cc

  • SHA256

    1447436b2481ff206379d7bbece652edb18ab7c6d7f63ec8c2a742ec72cd9e0d

  • SHA512

    30e3981f3072e4a96ed819157f92bc6a1eee0e1912754366bb200598eecb91debc61482c04d400fe4bfcf7e9ccc31e109a0ff165eb1e6c64f2253e2677628196

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4PX:0+h9OY70z+warul3E4PX

Score
9/10

Malware Config

Targets

    • Target

      259d058aaa27ed76f7b7127fbcfdff7a

    • Size

      512KB

    • MD5

      259d058aaa27ed76f7b7127fbcfdff7a

    • SHA1

      449687785d6a5cab667e853be1ca9e7e658658cc

    • SHA256

      1447436b2481ff206379d7bbece652edb18ab7c6d7f63ec8c2a742ec72cd9e0d

    • SHA512

      30e3981f3072e4a96ed819157f92bc6a1eee0e1912754366bb200598eecb91debc61482c04d400fe4bfcf7e9ccc31e109a0ff165eb1e6c64f2253e2677628196

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4PX:0+h9OY70z+warul3E4PX

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks