Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c631fdc909dc88d737e08b81562d8f1a

  • Size

    17KB

  • Sample

    240313-slecgsaa95

  • MD5

    c631fdc909dc88d737e08b81562d8f1a

  • SHA1

    fe88e74dee57f36e552a27811e887a9a44d2050d

  • SHA256

    1a759e51ae98da06c91a9f28ccde7caff80335bb23b5cb9b7bdec36095ac3806

  • SHA512

    1211f1cee93f167b790196fb0eee3303f60f958a049a11b67d8d3b02acf0d19513b69c42a010acb196946e317d112b648e266ab27f04d51148cb5cb84b3ec92b

  • SSDEEP

    384:0RFofcdKucmZO2Zp+Nye8pqrmub8TyztsDN:WOEKuoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      c631fdc909dc88d737e08b81562d8f1a

    • Size

      17KB

    • MD5

      c631fdc909dc88d737e08b81562d8f1a

    • SHA1

      fe88e74dee57f36e552a27811e887a9a44d2050d

    • SHA256

      1a759e51ae98da06c91a9f28ccde7caff80335bb23b5cb9b7bdec36095ac3806

    • SHA512

      1211f1cee93f167b790196fb0eee3303f60f958a049a11b67d8d3b02acf0d19513b69c42a010acb196946e317d112b648e266ab27f04d51148cb5cb84b3ec92b

    • SSDEEP

      384:0RFofcdKucmZO2Zp+Nye8pqrmub8TyztsDN:WOEKuoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks