Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    30e777e73b1db299d0b5bf492a65ff0cb1a749ee6d636e58843e4b8b3ab2a589

  • Size

    421KB

  • Sample

    240315-xel6zaab37

  • MD5

    c7a72087a3c79b49f8a976e9aa044cdf

  • SHA1

    c5ccc17fb40b77dbb32febabd7cb23504d0eb79a

  • SHA256

    30e777e73b1db299d0b5bf492a65ff0cb1a749ee6d636e58843e4b8b3ab2a589

  • SHA512

    1601c7c7eb58701c202edaff830ee7aa280a167c99ebc693fbdde2692917cbe81426615f77feb48ecf1ca450df6f512167c2c5abad43f01d4a225283f3d439fb

  • SSDEEP

    6144:WZT3H5umWrA7oSLvd5Gr83KS1PCG0LlZYO/G/lxRVQinwdYrjzUderlmsOVKkaq5:Wh3ZukLF5fRYZmLd7FDIsOPczRfv3+7

Score
7/10

Malware Config

Targets

    • Target

      30e777e73b1db299d0b5bf492a65ff0cb1a749ee6d636e58843e4b8b3ab2a589

    • Size

      421KB

    • MD5

      c7a72087a3c79b49f8a976e9aa044cdf

    • SHA1

      c5ccc17fb40b77dbb32febabd7cb23504d0eb79a

    • SHA256

      30e777e73b1db299d0b5bf492a65ff0cb1a749ee6d636e58843e4b8b3ab2a589

    • SHA512

      1601c7c7eb58701c202edaff830ee7aa280a167c99ebc693fbdde2692917cbe81426615f77feb48ecf1ca450df6f512167c2c5abad43f01d4a225283f3d439fb

    • SSDEEP

      6144:WZT3H5umWrA7oSLvd5Gr83KS1PCG0LlZYO/G/lxRVQinwdYrjzUderlmsOVKkaq5:Wh3ZukLF5fRYZmLd7FDIsOPczRfv3+7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks