Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8db03eddce86a9fa956c2141672a106caf6c51fc25ca9ef2222dbbcc1becbbf8

  • Size

    432KB

  • Sample

    240407-28sytshd8w

  • MD5

    d782c2ef1fff7d3ae8e081e6451dd6c7

  • SHA1

    305b70a69eb9d558cc0489a2fe2399808854fd7a

  • SHA256

    8db03eddce86a9fa956c2141672a106caf6c51fc25ca9ef2222dbbcc1becbbf8

  • SHA512

    26e05d7e7bd0df488c5f2e22711bda8edaae6bd7af72ddd0a33b7d845002a2ada1c65bc8a47dab3cbe3f643ff3746feb533d38e0c2f337eedf108aec717e4c7b

  • SSDEEP

    6144:a1V5dIgi71nAv/szQRzf4Zj3JVyN/Y53fZ6ZsVb7Y:YV5dInSssRWjPy9Y53B6A7Y

Score
10/10

Malware Config

Targets

    • Target

      8db03eddce86a9fa956c2141672a106caf6c51fc25ca9ef2222dbbcc1becbbf8

    • Size

      432KB

    • MD5

      d782c2ef1fff7d3ae8e081e6451dd6c7

    • SHA1

      305b70a69eb9d558cc0489a2fe2399808854fd7a

    • SHA256

      8db03eddce86a9fa956c2141672a106caf6c51fc25ca9ef2222dbbcc1becbbf8

    • SHA512

      26e05d7e7bd0df488c5f2e22711bda8edaae6bd7af72ddd0a33b7d845002a2ada1c65bc8a47dab3cbe3f643ff3746feb533d38e0c2f337eedf108aec717e4c7b

    • SSDEEP

      6144:a1V5dIgi71nAv/szQRzf4Zj3JVyN/Y53fZ6ZsVb7Y:YV5dInSssRWjPy9Y53B6A7Y

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks