Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3389d69cef7002a79cfb00279134d1dd459103cad074b4dcaac9657db01d1c12

  • Size

    12KB

  • Sample

    240514-y3azaafa88

  • MD5

    b0510443d664e0b905d0eb0d437c8b26

  • SHA1

    47695ccc9af844332e64308ee00d07610a885153

  • SHA256

    3389d69cef7002a79cfb00279134d1dd459103cad074b4dcaac9657db01d1c12

  • SHA512

    e8eeacf9cb65da281db439daa1bc472d29e479573da3992fdf458495037f630779c3bef7c77867d7f6bdc9a89a2e09392b469292d8adca685c6ce3f4e5a4207a

  • SSDEEP

    384:XL7li/2ztq2DcEQvdhcJKLTp/NK9xaUv:bNM/Q9cUv

Score
7/10

Malware Config

Targets

    • Target

      3389d69cef7002a79cfb00279134d1dd459103cad074b4dcaac9657db01d1c12

    • Size

      12KB

    • MD5

      b0510443d664e0b905d0eb0d437c8b26

    • SHA1

      47695ccc9af844332e64308ee00d07610a885153

    • SHA256

      3389d69cef7002a79cfb00279134d1dd459103cad074b4dcaac9657db01d1c12

    • SHA512

      e8eeacf9cb65da281db439daa1bc472d29e479573da3992fdf458495037f630779c3bef7c77867d7f6bdc9a89a2e09392b469292d8adca685c6ce3f4e5a4207a

    • SSDEEP

      384:XL7li/2ztq2DcEQvdhcJKLTp/NK9xaUv:bNM/Q9cUv

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks