Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    393e70e101d66920905a8213c9eeb218

  • Size

    264KB

  • Sample

    231231-rf7w6sddf7

  • MD5

    393e70e101d66920905a8213c9eeb218

  • SHA1

    c2f276a563d06a7a563ee880aaa990be6cfd2bae

  • SHA256

    2d4c9caf643d938554c5fba3ca06aa252034c10089f4449ee3254ab22aaba556

  • SHA512

    e82f8b77d66b501fa808f59d9d9833ed3f5ebabbff6f188e9bb6a7074cbe92c0443d71a39980c8011b3764c092194b9e7f54f2a0eb1b132a31a2aab84551406c

  • SSDEEP

    6144:0r+XI/3JJYHyxyIVEA4aZM9DRruwcu3zChvQ:O+XcvHmzKu3zChvQ

Score
10/10

Malware Config

Targets

    • Target

      393e70e101d66920905a8213c9eeb218

    • Size

      264KB

    • MD5

      393e70e101d66920905a8213c9eeb218

    • SHA1

      c2f276a563d06a7a563ee880aaa990be6cfd2bae

    • SHA256

      2d4c9caf643d938554c5fba3ca06aa252034c10089f4449ee3254ab22aaba556

    • SHA512

      e82f8b77d66b501fa808f59d9d9833ed3f5ebabbff6f188e9bb6a7074cbe92c0443d71a39980c8011b3764c092194b9e7f54f2a0eb1b132a31a2aab84551406c

    • SSDEEP

      6144:0r+XI/3JJYHyxyIVEA4aZM9DRruwcu3zChvQ:O+XcvHmzKu3zChvQ

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks