Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia

  • Size

    465KB

  • Sample

    240111-glb2kshbem

  • MD5

    8ab84328a353ca0378f8e66f25bbddc0

  • SHA1

    4b4b4cdd7604f0d936bf38f537ceb3068b5a38ac

  • SHA256

    580bd60a0f390fab78569736ccb84aa91db94245d84a53338c2658738e7a8c7b

  • SHA512

    3f9e83042021bbdfb78d5152f34ad939f0d5bec7b968913384fc97638ca880197e016c70c13b11c400966999fed17d001b5f883a68e1477475a3e714c2699a64

  • SSDEEP

    6144:jFrJxvldL4c5ONK1xgWbd1s79+iStcwfmC69/Ra3JzM9hUNDw/w9uUhZxJUeA:Bb4bZudi79Lz9C69/RW1M9hUN/9FTTA

Score
7/10

Malware Config

Targets

    • Target

      2024-01-10_8ab84328a353ca0378f8e66f25bbddc0_mafia

    • Size

      465KB

    • MD5

      8ab84328a353ca0378f8e66f25bbddc0

    • SHA1

      4b4b4cdd7604f0d936bf38f537ceb3068b5a38ac

    • SHA256

      580bd60a0f390fab78569736ccb84aa91db94245d84a53338c2658738e7a8c7b

    • SHA512

      3f9e83042021bbdfb78d5152f34ad939f0d5bec7b968913384fc97638ca880197e016c70c13b11c400966999fed17d001b5f883a68e1477475a3e714c2699a64

    • SSDEEP

      6144:jFrJxvldL4c5ONK1xgWbd1s79+iStcwfmC69/Ra3JzM9hUNDw/w9uUhZxJUeA:Bb4bZudi79Lz9C69/RW1M9hUN/9FTTA

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks