Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    67d44aa45f19678526582c3d0aa78332

  • Size

    592KB

  • Sample

    240119-rk585sfefn

  • MD5

    67d44aa45f19678526582c3d0aa78332

  • SHA1

    8b52470d31979942fccdd1e417e0685a6777a72d

  • SHA256

    e432d36803780fd2ea84a04a8c3da628c199f7e4475452d80073cbe414b64b5a

  • SHA512

    59b36082503b51f24cd0e6f39c71d699641033738b3b2d1b7ef3832a9fc9f673da3c51fc99476c3ebb26b50cba6a0358fbbebea4cfe368563e4ccf0d8eed57b5

  • SSDEEP

    12288:Sjl1j3u349jP0uKFe1SfG03I3frsCLlFeu/Na6hvV8ZAgAB:qvj3uI9FOp3+frsSFeuJhvhgM

Score
7/10

Malware Config

Targets

    • Target

      FOREXT~1.EXE

    • Size

      92KB

    • MD5

      ae43c4e21eb3ce59abc11a05715b3ded

    • SHA1

      71ff6401da206f316ac0763d458dd5035c74349b

    • SHA256

      cfbb3ee7d20862277a2f64c4bd375769a3f94434d7440b3c70302e4ca204d451

    • SHA512

      f45ca34601c36333b4842c592381677fa042ee7c8e40d83bce71758f3288c3e261ee83a65e3226416545a0506a0c1c3ca1058e2fbd7d082c45b1c5cdf3bc47a7

    • SSDEEP

      768:qZweQjcSJnuSCbIG4BTvOIQu3MQWfLggoDEcLqgIjbKkTte1:SwcS4hxSD/ZWcgoOgYbPBe

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      Install.exe

    • Size

      595KB

    • MD5

      3ec43a4d00dc9528cd4a11c9db0d4962

    • SHA1

      2c9ed0ad29ba606893c564a810205b11302d324a

    • SHA256

      43ac3ff8b8396ba17d9d38862f306bcd84481b1165bfaf238674c72435ceaca7

    • SHA512

      f400f399be3b6bb528e0c1c05658a5722486c9316e61532cc60cab2fd65b1946d5e94b580bb3749e25044b96d136533622c7417268c1f576bd76ab96394953e4

    • SSDEEP

      12288:u16jWu349V60fKF11SfRZ3Pxfms+LKFeu/Ja634V8lDv:RjWuI9vZD3ZfmstFeuN348

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks