Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3ac16f92621f818815ad14b15e2cffd0_NEAS

  • Size

    12KB

  • Sample

    240507-amg6nahh6t

  • MD5

    3ac16f92621f818815ad14b15e2cffd0

  • SHA1

    530e6e6d087ba618f85b4a10d34f971546dae60a

  • SHA256

    b471e7ce97113007617763a33db2373103a929dd78b6c5e9ea0ca6ff99365995

  • SHA512

    42324105b22c801e46745b4276897be6c3c8421f952d8ce13dfd4fa7eabd60a7acb48ce8df137121a5d979cab1ac95f603417e5dc0625ade90857cab3f4d6493

  • SSDEEP

    384:2L7li/2zdq2DcEQvdhcJKLTp/NK9xabia:w9M/Q9cOa

Score
7/10

Malware Config

Targets

    • Target

      3ac16f92621f818815ad14b15e2cffd0_NEAS

    • Size

      12KB

    • MD5

      3ac16f92621f818815ad14b15e2cffd0

    • SHA1

      530e6e6d087ba618f85b4a10d34f971546dae60a

    • SHA256

      b471e7ce97113007617763a33db2373103a929dd78b6c5e9ea0ca6ff99365995

    • SHA512

      42324105b22c801e46745b4276897be6c3c8421f952d8ce13dfd4fa7eabd60a7acb48ce8df137121a5d979cab1ac95f603417e5dc0625ade90857cab3f4d6493

    • SSDEEP

      384:2L7li/2zdq2DcEQvdhcJKLTp/NK9xabia:w9M/Q9cOa

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks