Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5e11eff5173c410bd412fcd074a02f57160860704d8c741f666defc0bca07794

  • Size

    88KB

  • Sample

    240406-1b52fscb75

  • MD5

    3b71acc58a2d1d0f025e9de2dfa10eb9

  • SHA1

    a1cc68a56bd7b08b492fa3c3ef81ce894fb6d4d7

  • SHA256

    5e11eff5173c410bd412fcd074a02f57160860704d8c741f666defc0bca07794

  • SHA512

    499e9ec1bd4cc98990a0e80330e5acb2f8135de38fb621a3ede178d4b0bbcb3f5a607c6cfcee2f5848d428d866242d926671518f899033bb16c0e196e5a203fb

  • SSDEEP

    768:vAq68qOJ+TtVwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAqHqlZaLFjnAzA5o6BfItoXjLl0hm

Score
10/10

Malware Config

Targets

    • Target

      5e11eff5173c410bd412fcd074a02f57160860704d8c741f666defc0bca07794

    • Size

      88KB

    • MD5

      3b71acc58a2d1d0f025e9de2dfa10eb9

    • SHA1

      a1cc68a56bd7b08b492fa3c3ef81ce894fb6d4d7

    • SHA256

      5e11eff5173c410bd412fcd074a02f57160860704d8c741f666defc0bca07794

    • SHA512

      499e9ec1bd4cc98990a0e80330e5acb2f8135de38fb621a3ede178d4b0bbcb3f5a607c6cfcee2f5848d428d866242d926671518f899033bb16c0e196e5a203fb

    • SSDEEP

      768:vAq68qOJ+TtVwHpFeh6gM1rA8dOsc7jUq4RkA5o3K1DfsvtzsXjLft+9o1mm:vAqHqlZaLFjnAzA5o6BfItoXjLl0hm

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks