Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

run.ps1

windows7-x64

8

run.ps1

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    run.ps1

  • Size

    2KB

  • Sample

    240715-tftqnaycjr

  • MD5

    c9cf4a8860f21ea2c8fd79b8e527a06b

  • SHA1

    385bd7877eba66e3ed43350227707b2b97c0effc

  • SHA256

    c6a55bb360c44bc4bc2ad2c0658c2bfd941e0bb987688dd9178c47059aa8b472

  • SHA512

    561f2494d87d56b9a3883f3afeb93c3e228367c6629deef2fa884dedf62cf0e7b15e8e2d2f1537fdcd3e84200244172e2c5fb36d779b278f256cf66019dd6fd3

Score
8/10
discoveryevasionexecutionexploit

Malware Config

Targets

    • Target

      run.ps1

    • Size

      2KB

    • MD5

      c9cf4a8860f21ea2c8fd79b8e527a06b

    • SHA1

      385bd7877eba66e3ed43350227707b2b97c0effc

    • SHA256

      c6a55bb360c44bc4bc2ad2c0658c2bfd941e0bb987688dd9178c47059aa8b472

    • SHA512

      561f2494d87d56b9a3883f3afeb93c3e228367c6629deef2fa884dedf62cf0e7b15e8e2d2f1537fdcd3e84200244172e2c5fb36d779b278f256cf66019dd6fd3

    Score
    8/10
    discoveryevasionexecutionexploit

    • Disables Task Manager via registry modification

      evasion

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks