Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    WinToolkit.exe

  • Size

    17.1MB

  • Sample

    240524-srkfpaad6w

  • MD5

    86e3765bd385c07ee8130bcc8818b0f7

  • SHA1

    3132600be547a702097dbd92d852c0e2d9893086

  • SHA256

    9df3185347ef7d85e2252dbb233369bd1183bf969e65413d07867cb6975509ab

  • SHA512

    ebca9fc505e6357349c92e971fcc55a2e3db2fac1abe0bac22a7d296e10957f9c28cef2c76841dc8ef8bd2bf497bec144df6284cb2c8628d738b3627670ae1e0

  • SSDEEP

    393216:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP65kL2FA3CBcTeN4fKp0bm1QHSxsjO9Iva3:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP6X

Score
7/10

Malware Config

Targets

    • Target

      WinToolkit.exe

    • Size

      17.1MB

    • MD5

      86e3765bd385c07ee8130bcc8818b0f7

    • SHA1

      3132600be547a702097dbd92d852c0e2d9893086

    • SHA256

      9df3185347ef7d85e2252dbb233369bd1183bf969e65413d07867cb6975509ab

    • SHA512

      ebca9fc505e6357349c92e971fcc55a2e3db2fac1abe0bac22a7d296e10957f9c28cef2c76841dc8ef8bd2bf497bec144df6284cb2c8628d738b3627670ae1e0

    • SSDEEP

      393216:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP65kL2FA3CBcTeN4fKp0bm1QHSxsjO9Iva3:Rn2R47DAB2HsdCjoZO/0Va7yMDudoP6X

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks