Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Greenshot-INSTALLER-1.2.10.6-RELEASE.exe

  • Size

    1.7MB

  • Sample

    240716-jvsf2ascmk

  • MD5

    c16f86882d5a102ed7a0fbbc0874d102

  • SHA1

    4e3ac7a53f0f368b9218bf717162d5e073a0f7df

  • SHA256

    1687311b4e7a3720be20490e8ed6cc772a32336a7bed8896e475b8ec616c6b81

  • SHA512

    90b7aac54467b266a9dd9ce7c83a156d3d99f7aeb1ad0e3e2ef5516b38270112dae07892e3e80765c3508484e3ee66e7439db0512a63b48f64e6b15e83285f67

  • SSDEEP

    49152:Cjt17kLz5P3mucJZCliSAbFXHrZy0HCxgdjmyZ3xog:AjkLlP2bClDC9Fjd

Malware Config

Targets

    • Target

      Greenshot-INSTALLER-1.2.10.6-RELEASE.exe

    • Size

      1.7MB

    • MD5

      c16f86882d5a102ed7a0fbbc0874d102

    • SHA1

      4e3ac7a53f0f368b9218bf717162d5e073a0f7df

    • SHA256

      1687311b4e7a3720be20490e8ed6cc772a32336a7bed8896e475b8ec616c6b81

    • SHA512

      90b7aac54467b266a9dd9ce7c83a156d3d99f7aeb1ad0e3e2ef5516b38270112dae07892e3e80765c3508484e3ee66e7439db0512a63b48f64e6b15e83285f67

    • SSDEEP

      49152:Cjt17kLz5P3mucJZCliSAbFXHrZy0HCxgdjmyZ3xog:AjkLlP2bClDC9Fjd

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks