Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3c61d239a11ae0d2be0f6bd9c3e3b715.unknown

  • Size

    78KB

  • Sample

    240106-l4cs2sdbdk

  • MD5

    3c61d239a11ae0d2be0f6bd9c3e3b715

  • SHA1

    34b463b87711ce55d58a4256cc3802e11ae0906f

  • SHA256

    6db41851a55f3efacb61f780d08271b884a5fe346725b7e22b1e082702dcab62

  • SHA512

    40c023c05c55a197204c3708d7f5769e7f309322fd109cc2d09ceec9a4fc54a4929e9ec42b5ff8c126fbfb2557cc1589fd65667b174fc8876ab39375b6757d13

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/oU:59Ry98guHVBqqg2bcruzUHmLKeMMU7GK

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      3c61d239a11ae0d2be0f6bd9c3e3b715.unknown

    • Size

      78KB

    • MD5

      3c61d239a11ae0d2be0f6bd9c3e3b715

    • SHA1

      34b463b87711ce55d58a4256cc3802e11ae0906f

    • SHA256

      6db41851a55f3efacb61f780d08271b884a5fe346725b7e22b1e082702dcab62

    • SHA512

      40c023c05c55a197204c3708d7f5769e7f309322fd109cc2d09ceec9a4fc54a4929e9ec42b5ff8c126fbfb2557cc1589fd65667b174fc8876ab39375b6757d13

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/oU:59Ry98guHVBqqg2bcruzUHmLKeMMU7GK

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks