Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3fe726105c6b3598b3e634d62d69ecd0

  • Size

    17KB

  • Sample

    240104-e6bkfabda2

  • MD5

    3fe726105c6b3598b3e634d62d69ecd0

  • SHA1

    09f441c3631f6c37c3a9e8f11c00a5d800deb303

  • SHA256

    efe3b29aea600cd88906452fb5d02d1255d46cb02c39a71cc55af0a6f0deb10f

  • SHA512

    84abbfa2acae0f0b221ae79a9739bc1c16ea437e826673fa91b7019fa909ad67310d672dd0f163bf66556c9090f498ffb1bcb2a6f13da00e4778640b07100d1c

  • SSDEEP

    384:PFUtBQCBcmZO2Zp+Nye8pqrmub8TyztsDN:PuECBoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      3fe726105c6b3598b3e634d62d69ecd0

    • Size

      17KB

    • MD5

      3fe726105c6b3598b3e634d62d69ecd0

    • SHA1

      09f441c3631f6c37c3a9e8f11c00a5d800deb303

    • SHA256

      efe3b29aea600cd88906452fb5d02d1255d46cb02c39a71cc55af0a6f0deb10f

    • SHA512

      84abbfa2acae0f0b221ae79a9739bc1c16ea437e826673fa91b7019fa909ad67310d672dd0f163bf66556c9090f498ffb1bcb2a6f13da00e4778640b07100d1c

    • SSDEEP

      384:PFUtBQCBcmZO2Zp+Nye8pqrmub8TyztsDN:PuECBoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks