Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5a6ae73bd5dfbc10f0d5f846e7039d46

  • Size

    17KB

  • Sample

    240114-f9tqvsdhc5

  • MD5

    5a6ae73bd5dfbc10f0d5f846e7039d46

  • SHA1

    d3e80b5793342467ca8bea363e23a38c04846ed0

  • SHA256

    90f8beb30508fd9030cac05d500553c4e0b9532215aa4cc6857c21757bdfe05a

  • SHA512

    492e66ee0ebab70ff5486437c9f91206bde328eead12cf9e3582108d950599c2fd7faf70de2bfc8c99dc53ae9138726f79a646fd4734a072a6953f797bf7a312

  • SSDEEP

    384:96Fw+91xdcmZO2Zp+Nye8pqrmub8TyztsDN:gCWxdoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      5a6ae73bd5dfbc10f0d5f846e7039d46

    • Size

      17KB

    • MD5

      5a6ae73bd5dfbc10f0d5f846e7039d46

    • SHA1

      d3e80b5793342467ca8bea363e23a38c04846ed0

    • SHA256

      90f8beb30508fd9030cac05d500553c4e0b9532215aa4cc6857c21757bdfe05a

    • SHA512

      492e66ee0ebab70ff5486437c9f91206bde328eead12cf9e3582108d950599c2fd7faf70de2bfc8c99dc53ae9138726f79a646fd4734a072a6953f797bf7a312

    • SSDEEP

      384:96Fw+91xdcmZO2Zp+Nye8pqrmub8TyztsDN:gCWxdoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks