Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    59980a5a3472e8737e7a72f870061235

  • Size

    112KB

  • Sample

    240113-2khg7agch8

  • MD5

    59980a5a3472e8737e7a72f870061235

  • SHA1

    be0577e79663df03a2e5cf902f283029d0fd1940

  • SHA256

    f584c54ae63e4dde92f8da1d098a0ff3f1c1dd263041e8d45fa88dc809bdfa19

  • SHA512

    081543a783ce8b6081bd2c1747ee92cf20bdb6a802af77656d7a85cae59364fe90b78833284715f8aa659e5384c710b2ebd46e5fe2458a70b25e2e22e2ec68b9

  • SSDEEP

    1536:RCyqWhBVC4LN0IqxxSWtn69X0CJDwXwlFoE4nO:0y7BVVLNbqxxTt69kKUMFoEt

Score
7/10

Malware Config

Targets

    • Target

      59980a5a3472e8737e7a72f870061235

    • Size

      112KB

    • MD5

      59980a5a3472e8737e7a72f870061235

    • SHA1

      be0577e79663df03a2e5cf902f283029d0fd1940

    • SHA256

      f584c54ae63e4dde92f8da1d098a0ff3f1c1dd263041e8d45fa88dc809bdfa19

    • SHA512

      081543a783ce8b6081bd2c1747ee92cf20bdb6a802af77656d7a85cae59364fe90b78833284715f8aa659e5384c710b2ebd46e5fe2458a70b25e2e22e2ec68b9

    • SSDEEP

      1536:RCyqWhBVC4LN0IqxxSWtn69X0CJDwXwlFoE4nO:0y7BVVLNbqxxTt69kKUMFoEt

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks