Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

12/06/2024, 14:03

240612-rc7r1axfmg 5

12/06/2024, 13:49

240612-q4t5jsxcmc 8

General

  • Target

    7054 Series PCL 1.18.exe

  • Size

    8.9MB

  • Sample

    240612-q4t5jsxcmc

  • MD5

    03277d35cffb0d44cc49aa7e2f59fd27

  • SHA1

    308a4d6d1d13b6fe2830285d73ed0d0f16328b6f

  • SHA256

    1c789bb7c7bf32bbc110ffb989e58d4f0fa213e59ef6a9e7e7594099b0811e7e

  • SHA512

    dfb2bb7c8eb582d975ca5dfd593f31e27d310c34b617c355f23fb634824e115215078f4ec5eaa27637645aa09d8ab2f14666acc8cdb4b0a23e55d9ed2c2ca1cd

  • SSDEEP

    196608:jF6lzroCsEtq1CgZq2swC4IjMmbfbHZyQIIAbVhG3nHiQ:jF6dc7YqJZdfCowfUQUTWnHX

Score
8/10

Malware Config

Targets

    • Target

      7054 Series PCL 1.18.exe

    • Size

      8.9MB

    • MD5

      03277d35cffb0d44cc49aa7e2f59fd27

    • SHA1

      308a4d6d1d13b6fe2830285d73ed0d0f16328b6f

    • SHA256

      1c789bb7c7bf32bbc110ffb989e58d4f0fa213e59ef6a9e7e7594099b0811e7e

    • SHA512

      dfb2bb7c8eb582d975ca5dfd593f31e27d310c34b617c355f23fb634824e115215078f4ec5eaa27637645aa09d8ab2f14666acc8cdb4b0a23e55d9ed2c2ca1cd

    • SSDEEP

      196608:jF6lzroCsEtq1CgZq2swC4IjMmbfbHZyQIIAbVhG3nHiQ:jF6dc7YqJZdfCowfUQUTWnHX

    Score
    8/10
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks