Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    370f381a9244c0be8311851ee6b2d086

  • Size

    17KB

  • Sample

    231231-p8r1bagdh5

  • MD5

    370f381a9244c0be8311851ee6b2d086

  • SHA1

    ece2a5643b9287ef2ac9b66ad548246dbd8a4af4

  • SHA256

    24641eac5a4f00dae414374ce058dff9b7c0b6dca9c15dc24c1b61e905dceecb

  • SHA512

    5ea6145a2b282c66bef9155198c27d22d91170bf67286028a3e10e45e045e40373501b265cc1c9e5c9e29e67dee7548a65878d13be6007a032744873e3d32fce

  • SSDEEP

    384:hF9cVGHRcmZO2Zp+Nye8pqrmub8TyztsDN:hbjHRoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      370f381a9244c0be8311851ee6b2d086

    • Size

      17KB

    • MD5

      370f381a9244c0be8311851ee6b2d086

    • SHA1

      ece2a5643b9287ef2ac9b66ad548246dbd8a4af4

    • SHA256

      24641eac5a4f00dae414374ce058dff9b7c0b6dca9c15dc24c1b61e905dceecb

    • SHA512

      5ea6145a2b282c66bef9155198c27d22d91170bf67286028a3e10e45e045e40373501b265cc1c9e5c9e29e67dee7548a65878d13be6007a032744873e3d32fce

    • SSDEEP

      384:hF9cVGHRcmZO2Zp+Nye8pqrmub8TyztsDN:hbjHRoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks