Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7842bc745e4c48efeb6ba743cd98fcbb

  • Size

    1.3MB

  • Sample

    240126-yqfc8sdcg8

  • MD5

    7842bc745e4c48efeb6ba743cd98fcbb

  • SHA1

    7dfb59ab128df696d1fbbb5e404e58549c682a31

  • SHA256

    a5de2d43ad63dc2314c5823b3a9ecd0eec43057a38016e8f541a5495c0312675

  • SHA512

    7b2945fdf5c310aa18a58823a1b1c18473fff7036ad001067ce39a7f60e0368997928eac4cc90c4c6d07fc0c17534366d2400b778e705e683db42c24140231aa

  • SSDEEP

    24576:+ba/MZz9DT1DHEZbDsqwD7Yyr8kmEAZSIZLzlQAeSxf/Tus28R6:x2PjEc7EZSIzlQA3xf7B6

Score
8/10

Malware Config

Targets

    • Target

      hosts自动更新工具/hostsup.exe

    • Size

      1.3MB

    • MD5

      c21960106da028ab79683b1734959d2f

    • SHA1

      c5f8ee61978422dfaba4a910c11136fad6ac3ea6

    • SHA256

      8245fbf6adfce62357bf92c6e4e12358e04ad7ea9b6b131fb30ba03eaa8c9443

    • SHA512

      d3629fe553eb4920731db4e05ad17e12f10691ff4a4a5e811de8701f0f8748335ce90c506934f82b813b0f6f2ee84710eca2aec7213df1444af8e111da01cc06

    • SSDEEP

      24576:vczJKVdfnx6G7Aa6lMr1SA3IreNbNhl88Vo5i+MgZPeScqzYcypZBecGnQ2J+x:vcAvx6GJ6lM1SaAeVl88Vo5qgcqzY7Zx

    Score
    8/10
    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Target

      hosts自动更新工具/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks