Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c6c0ad02cc12599f4a7f5407b012ebfc

  • Size

    109KB

  • Sample

    240313-ywyf1ahc36

  • MD5

    c6c0ad02cc12599f4a7f5407b012ebfc

  • SHA1

    4b8a0ac4a318c35c3a7f3324b0f4540b26b07ab6

  • SHA256

    856306aaae6fab2e08d0d5be79ca8ad0ae829928cf09cce2b241ddd7788068d2

  • SHA512

    b271d2f7de7409dfb5dc515f4add17257f6e6e586287be63036a05b1c88cee165eece3afba9efed08a5c68ead24fc27b978b029e752fe026c7b86479d93c9ce0

  • SSDEEP

    3072:59Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzIvt/4g5eaXZ:59Ry9RuXqW4SzUHmLKeMMU7GwWBPwVGy

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      c6c0ad02cc12599f4a7f5407b012ebfc

    • Size

      109KB

    • MD5

      c6c0ad02cc12599f4a7f5407b012ebfc

    • SHA1

      4b8a0ac4a318c35c3a7f3324b0f4540b26b07ab6

    • SHA256

      856306aaae6fab2e08d0d5be79ca8ad0ae829928cf09cce2b241ddd7788068d2

    • SHA512

      b271d2f7de7409dfb5dc515f4add17257f6e6e586287be63036a05b1c88cee165eece3afba9efed08a5c68ead24fc27b978b029e752fe026c7b86479d93c9ce0

    • SSDEEP

      3072:59Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kV8Gd5bzIvt/4g5eaXZ:59Ry9RuXqW4SzUHmLKeMMU7GwWBPwVGy

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks