Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fd62e3b116620bdab24a5f6a7025651875fbea969b713c74d21e22e236aa6036

  • Size

    520KB

  • Sample

    240624-fnfbca1dll

  • MD5

    8c9fddc17a7de922e69b989855af4cd7

  • SHA1

    d5f9ef3823700e5d105d383ad3c65e0efb7bb45b

  • SHA256

    fd62e3b116620bdab24a5f6a7025651875fbea969b713c74d21e22e236aa6036

  • SHA512

    0a3f284b21939e5632a878deffb38add71bd781fc337104d052ce12add682dace8c44b2341dcedd769b1f406e88341d15a6b97cbcaf1a2a2af1923f568f41892

  • SSDEEP

    12288:zW6n3sX4yCFr2ZemYOpSPIsGWeKZl4q7sioXZ:zW6ncoyqOp6IsTl/mXZ

Score
10/10

Malware Config

Targets

    • Target

      fd62e3b116620bdab24a5f6a7025651875fbea969b713c74d21e22e236aa6036

    • Size

      520KB

    • MD5

      8c9fddc17a7de922e69b989855af4cd7

    • SHA1

      d5f9ef3823700e5d105d383ad3c65e0efb7bb45b

    • SHA256

      fd62e3b116620bdab24a5f6a7025651875fbea969b713c74d21e22e236aa6036

    • SHA512

      0a3f284b21939e5632a878deffb38add71bd781fc337104d052ce12add682dace8c44b2341dcedd769b1f406e88341d15a6b97cbcaf1a2a2af1923f568f41892

    • SSDEEP

      12288:zW6n3sX4yCFr2ZemYOpSPIsGWeKZl4q7sioXZ:zW6ncoyqOp6IsTl/mXZ

    Score
    10/10
    • Modifies firewall policy service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks