Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.FileRepMalware.27260.32362

  • Size

    583KB

  • Sample

    240304-qwq3xsce96

  • MD5

    3611aeaa75d2888ab246467f0bde21c7

  • SHA1

    4df4028cf5fbb6e0d34d8ba22400baaaba739cf9

  • SHA256

    02a8a2bef5d2b4d5db29d7be9eb9369e82c596b2749885c11ad2e690f1123fc7

  • SHA512

    c6622154c4a1cf8bcc32abed4b2a48ac8e9372c7dfad2ae650f3ebfef6848a6470cea2db139b9d0677550d41dba884a67c4f5911cbf4120c3f094c80691e88d1

  • SSDEEP

    12288:RqeVQkTrvj4fPNxie49ih73VAPH8o3wAzyw:RXQkTf4fe+YH80Vj

Score
8/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.FileRepMalware.27260.32362

    • Size

      583KB

    • MD5

      3611aeaa75d2888ab246467f0bde21c7

    • SHA1

      4df4028cf5fbb6e0d34d8ba22400baaaba739cf9

    • SHA256

      02a8a2bef5d2b4d5db29d7be9eb9369e82c596b2749885c11ad2e690f1123fc7

    • SHA512

      c6622154c4a1cf8bcc32abed4b2a48ac8e9372c7dfad2ae650f3ebfef6848a6470cea2db139b9d0677550d41dba884a67c4f5911cbf4120c3f094c80691e88d1

    • SSDEEP

      12288:RqeVQkTrvj4fPNxie49ih73VAPH8o3wAzyw:RXQkTf4fe+YH80Vj

    Score
    8/10
    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks