Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    58509938dab387c484fecd5184fbef7f

  • Size

    252KB

  • Sample

    240113-h4654sebgm

  • MD5

    58509938dab387c484fecd5184fbef7f

  • SHA1

    bbddeabb74f060b349e43b4ba80db60e780d6a25

  • SHA256

    dc94b4affda2f2ccce65e9c70d5673c796c1418ffe11e1c956bda870d636758c

  • SHA512

    2d4ed0b3f5d53a23b887f57a3e7b0f36d0ba60d04a5d61237dbc5119fbb5f8ad539f874d5ec29f94fd2992cba5c9f399dde2b75efcb3506aee5d00d2ac013ecd

  • SSDEEP

    6144:EIO/OELQYCM/IsVVUUUEDOWb+BRuQRBuk+3g:EIIlEM/DUUUEDOWCBRbRkk+g

Score
7/10

Malware Config

Targets

    • Target

      58509938dab387c484fecd5184fbef7f

    • Size

      252KB

    • MD5

      58509938dab387c484fecd5184fbef7f

    • SHA1

      bbddeabb74f060b349e43b4ba80db60e780d6a25

    • SHA256

      dc94b4affda2f2ccce65e9c70d5673c796c1418ffe11e1c956bda870d636758c

    • SHA512

      2d4ed0b3f5d53a23b887f57a3e7b0f36d0ba60d04a5d61237dbc5119fbb5f8ad539f874d5ec29f94fd2992cba5c9f399dde2b75efcb3506aee5d00d2ac013ecd

    • SSDEEP

      6144:EIO/OELQYCM/IsVVUUUEDOWb+BRuQRBuk+3g:EIIlEM/DUUUEDOWCBRbRkk+g

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks