Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

56a5a4536b...284.js

windows7-x64

10

56a5a4536b...284.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56a5a4536b6128085e1213ad6b997284

  • Size

    60KB

  • Sample

    240112-q94k6saad3

  • MD5

    56a5a4536b6128085e1213ad6b997284

  • SHA1

    7893be62a18683b1b9107a79fd819df9034ef89d

  • SHA256

    60cb33a00ba627061d14b3bf96df7aa11fdc17105d6ab59812b4c59bd804706f

  • SHA512

    ab8e9a16758dc69a49c412c54d42314987d0f062fbdc2a45d758262bf2c82260500cae179c3c0f7f33d1b8ed0f85ab35662a03f435d32f10641bce820a49891d

  • SSDEEP

    1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/od:59Ry98guHVBqqg2bcruzUHmLKeMMU7GH

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      56a5a4536b6128085e1213ad6b997284

    • Size

      60KB

    • MD5

      56a5a4536b6128085e1213ad6b997284

    • SHA1

      7893be62a18683b1b9107a79fd819df9034ef89d

    • SHA256

      60cb33a00ba627061d14b3bf96df7aa11fdc17105d6ab59812b4c59bd804706f

    • SHA512

      ab8e9a16758dc69a49c412c54d42314987d0f062fbdc2a45d758262bf2c82260500cae179c3c0f7f33d1b8ed0f85ab35662a03f435d32f10641bce820a49891d

    • SSDEEP

      1536:59Ry98guHVBqqg2bcruayUHmLKeZaMU7GwbWBPwVGWl9SZ8kV8Gp/5bzIEN4t/od:59Ry98guHVBqqg2bcruzUHmLKeMMU7GH

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks