Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    729a18f42f9dac4d74bf98866624f221

  • Size

    17KB

  • Sample

    240124-vwzghsecc3

  • MD5

    729a18f42f9dac4d74bf98866624f221

  • SHA1

    8e4f714b312fde6095d891db223e6f69fe4a05cb

  • SHA256

    e7e2b49f6624515e9a73924fb12f257cd0d8bedf1e63d4844ad820695888f136

  • SHA512

    f3de7de727b3337a363cf64275b17497eb3f3a6876753cb3bcf78186e0ff665235a33aed1573f4c7da6ec547868d3acb3567ebda4b4ce730cbfe9ee6153a7f68

  • SSDEEP

    384:SXF8ShaDrcmZO2Zp+Nye8pqrmub8TyztsDN:SXyZDroKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      729a18f42f9dac4d74bf98866624f221

    • Size

      17KB

    • MD5

      729a18f42f9dac4d74bf98866624f221

    • SHA1

      8e4f714b312fde6095d891db223e6f69fe4a05cb

    • SHA256

      e7e2b49f6624515e9a73924fb12f257cd0d8bedf1e63d4844ad820695888f136

    • SHA512

      f3de7de727b3337a363cf64275b17497eb3f3a6876753cb3bcf78186e0ff665235a33aed1573f4c7da6ec547868d3acb3567ebda4b4ce730cbfe9ee6153a7f68

    • SSDEEP

      384:SXF8ShaDrcmZO2Zp+Nye8pqrmub8TyztsDN:SXyZDroKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks