Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    635fdcbf5c3af871066c640ee1172b8847d4ab2f7fe081ae04012c27b24fb01b

  • Size

    98KB

  • Sample

    240502-2kmrxage2x

  • MD5

    bab87e3761d3cc3079799caa1a3639ef

  • SHA1

    dcaf1cae0c2edd9754e7e5234a2b9947923628e5

  • SHA256

    635fdcbf5c3af871066c640ee1172b8847d4ab2f7fe081ae04012c27b24fb01b

  • SHA512

    0f7e2a6eb59587d0c456b20eec54ff8ae39329291f36383342db21584eead07ce28ce7b0c17422572d3ecc19c56815023395aa2aa1bad36daf71a1ed6f0bfd1e

  • SSDEEP

    768:dxDDnyAiIbhn+oRTaFSxjORUh6EDFAnAL+7DUdjaYoCMHosadujaOnNP0mPefoCK:dxDDnd1RaqOrsdSCM+qvGDg1W+DQ6Ke

Score
10/10

Malware Config

Targets

    • Target

      635fdcbf5c3af871066c640ee1172b8847d4ab2f7fe081ae04012c27b24fb01b

    • Size

      98KB

    • MD5

      bab87e3761d3cc3079799caa1a3639ef

    • SHA1

      dcaf1cae0c2edd9754e7e5234a2b9947923628e5

    • SHA256

      635fdcbf5c3af871066c640ee1172b8847d4ab2f7fe081ae04012c27b24fb01b

    • SHA512

      0f7e2a6eb59587d0c456b20eec54ff8ae39329291f36383342db21584eead07ce28ce7b0c17422572d3ecc19c56815023395aa2aa1bad36daf71a1ed6f0bfd1e

    • SSDEEP

      768:dxDDnyAiIbhn+oRTaFSxjORUh6EDFAnAL+7DUdjaYoCMHosadujaOnNP0mPefoCK:dxDDnd1RaqOrsdSCM+qvGDg1W+DQ6Ke

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks