Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c06c6ba80f689afe763da6dcdf2087d6

  • Size

    512KB

  • Sample

    240311-m3zf4agg89

  • MD5

    c06c6ba80f689afe763da6dcdf2087d6

  • SHA1

    1794042d0f6a7c5aec8c082afe40bd62fa95fd24

  • SHA256

    0555f2574b8038730c5b57727ef6891c12e33f908c18ce5d01b27b8567a24395

  • SHA512

    e580baf5c0d5ebe6fca1ab753973f9fa26825fa3eb93712d408045411ea78e0c6de2393ae11291fb0011fa0d93f9d30d4dde60ae76070a5dfcd560b56ad5f203

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c

Score
9/10

Malware Config

Targets

    • Target

      c06c6ba80f689afe763da6dcdf2087d6

    • Size

      512KB

    • MD5

      c06c6ba80f689afe763da6dcdf2087d6

    • SHA1

      1794042d0f6a7c5aec8c082afe40bd62fa95fd24

    • SHA256

      0555f2574b8038730c5b57727ef6891c12e33f908c18ce5d01b27b8567a24395

    • SHA512

      e580baf5c0d5ebe6fca1ab753973f9fa26825fa3eb93712d408045411ea78e0c6de2393ae11291fb0011fa0d93f9d30d4dde60ae76070a5dfcd560b56ad5f203

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks