Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    rechnung_RG85848.zip

  • Size

    998B

  • Sample

    240719-hjycga1bra

  • MD5

    e0f95bea7f04bbb2eb804cc7420ad42d

  • SHA1

    544641b261417c290c6b043c11b158da94e98a3f

  • SHA256

    0a4c083b259dbadd6433c511db2f7cb61312475792c028b64469b4c6b1da8f02

  • SHA512

    9d09ee172e57b1564f642d280cd8fec5a272657eecfeaad84024f3b390cca9f347c1579a2d8ac3a34f985cf80b58531163affaf522ff32ba4017e9aaf4175e01

Score
8/10

Malware Config

Targets

    • Target

      2399958533013013977.bat

    • Size

      2KB

    • MD5

      4bc293db651301854de551fc0a84602b

    • SHA1

      0f555e9cad3a3ee87a3be1bb5142514e33de21f7

    • SHA256

      b77b6fc5e6023a7c4e9d72fec66f69041236c7a6d0501b29b847122652174a81

    • SHA512

      04eef81333e94a9c24574b6cf2d49943071c5db2b395ceb95c452b0333ae62adf2e057a9ae6caef9a60f8dce90611bce02d008a51be2d1d7ac45cb09972c1036

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks