Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    15042024_1735_08042024_TEMPLATE LIST.pdf.arj

  • Size

    715KB

  • Sample

    240415-lkk1babb83

  • MD5

    631a1040937819b22334f9ffc3db4383

  • SHA1

    3713ee2e580fff8fc0b8de705e6a309d270d3e67

  • SHA256

    c48bbf430a5bbc50eeff81ed32a5ac8276f1c3c854058628f8241247a6da992d

  • SHA512

    5d718a91f0c50765abc0f29ae8454c2df083ae14f8b5283b5fd2cba96080ee073f91e2e858bf6b042ad330f79357c41e41fc5e0610d9dd4b10cad49fc8424ad9

  • SSDEEP

    12288:afbUxbf3g89tirhZQd7LbXk/ep9mmfPEHlI8+VQoMk78FqoT8cp:af6zTDiVU7LbsQbncI8uMxBwk

Score
7/10

Malware Config

Targets

    • Target

      TEMPLATE LIST.pdf.exe

    • Size

      780KB

    • MD5

      fb83d61aba54d7e9acaf3d2fa859c941

    • SHA1

      93c68b537d9a3c945bcc5165df63638afe9bae48

    • SHA256

      9ce963b4ba27abdf1395a51e9063d5d24be8b5388702b17e8f3ee27e88ebc746

    • SHA512

      502c6f14d0254bdde633c31094f7112099762c705a03cb6d5a87b19d25ca0457c64c23af8b4266bff097411fad776e6ab85c1d4d62a51c6535a431a72c06b290

    • SSDEEP

      12288:/B1oVeoni0NjSchnp/UzinHZ0MYdB54+RIX2T4iY+MWPufcm4WksTzv9i:bo5bN2bzLBi+74iGWJWnHv

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks