Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7bd04633f8ccdaa8adf2c08ca5fb86a7
-
Size
28KB
-
Sample
240128-bzyvlsgee3
-
MD5
7bd04633f8ccdaa8adf2c08ca5fb86a7
-
SHA1
384a9c69f3ce0a87c45733dff8e5d6757af88a6c
-
SHA256
f27089e764a7cc4fc490dbc02986b759fb77a085e665b359aa49697e72c6ab6e
-
SHA512
6381bb439aeb5c49e9de041a03115f3a9a23f9bf437ac4631621412294e917b0b528dc41633ff38bc8a4f00ce9a0bc7c2f2df3fb24c1c407812ce8952e282cb1
-
SSDEEP
768:MC9IUHWc3YdxPJB65qf+wgGfwp3U1fZHfEO7CDrm:MCSUHWc3YdZJB/gNpk1BfDH
Behavioral task
behavioral1
Sample
7bd04633f8ccdaa8adf2c08ca5fb86a7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7bd04633f8ccdaa8adf2c08ca5fb86a7.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
7bd04633f8ccdaa8adf2c08ca5fb86a7
-
Size
28KB
-
MD5
7bd04633f8ccdaa8adf2c08ca5fb86a7
-
SHA1
384a9c69f3ce0a87c45733dff8e5d6757af88a6c
-
SHA256
f27089e764a7cc4fc490dbc02986b759fb77a085e665b359aa49697e72c6ab6e
-
SHA512
6381bb439aeb5c49e9de041a03115f3a9a23f9bf437ac4631621412294e917b0b528dc41633ff38bc8a4f00ce9a0bc7c2f2df3fb24c1c407812ce8952e282cb1
-
SSDEEP
768:MC9IUHWc3YdxPJB65qf+wgGfwp3U1fZHfEO7CDrm:MCSUHWc3YdZJB/gNpk1BfDH
Score10/10-
Modifies firewall policy service
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2