Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Windscribe_2.9.9.exe

  • Size

    23.5MB

  • Sample

    240614-vy9p9szdkf

  • MD5

    fa06ef3b79d6858a9c9325624e55f8cc

  • SHA1

    127cb9d116b0256f7eaf993343b87cce82b7fcb2

  • SHA256

    d2a817e8f2738cacc646d3dc2194d7fd28f2ce1de435be24fa98ed8928b4daa2

  • SHA512

    68ba874faf6fede8f0689d4e3835f0cdf79c01aebe91c2fab9a5c981821ee6f52a50e4ff208015e886ee954560f8e1031e926e5362b488e3863aa9a605ec3ba7

  • SSDEEP

    393216:WntmQlURIlyJLsE/sYj0Opz66ggNEMegUplkW1BsxHQSJi7YSl6m7NMo2YgzW1U:ethwIlasS4szNggNPgplHfSdwYS/NMh7

Malware Config

Targets

    • Target

      Windscribe_2.9.9.exe

    • Size

      23.5MB

    • MD5

      fa06ef3b79d6858a9c9325624e55f8cc

    • SHA1

      127cb9d116b0256f7eaf993343b87cce82b7fcb2

    • SHA256

      d2a817e8f2738cacc646d3dc2194d7fd28f2ce1de435be24fa98ed8928b4daa2

    • SHA512

      68ba874faf6fede8f0689d4e3835f0cdf79c01aebe91c2fab9a5c981821ee6f52a50e4ff208015e886ee954560f8e1031e926e5362b488e3863aa9a605ec3ba7

    • SSDEEP

      393216:WntmQlURIlyJLsE/sYj0Opz66ggNEMegUplkW1BsxHQSJi7YSl6m7NMo2YgzW1U:ethwIlasS4szNggNPgplHfSdwYS/NMh7

    • Drops file in Drivers directory

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks