Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2193413201207055303.bat

  • Size

    11KB

  • Sample

    240719-r5pf5awfjp

  • MD5

    dee9ee51c5aa6ac728708511e15a952a

  • SHA1

    a76fb2add4e53263cf174721644ac3aa3c2fe1ce

  • SHA256

    93be448106e9a6dbc3e951abbef8cb15324f00bd025add81413fb96e3e49417d

  • SHA512

    fbdc1625199d55b58ed1834f28221a53c04c0f03c00a1561bd4094952b1dda53220155866d055f5ca65eed3dc92862c3e45971c3ce1340a6d89411b2ca28b93c

  • SSDEEP

    192:JgXGXXdoHsEiZ+GJdvLKsYPe89Zu3bx1bx28atTAbYXfHdXc5syJhwt4:JgXAXdo85JFGFPe89ZUbx1bx28fbY/+J

Score
8/10

Malware Config

Targets

    • Target

      2193413201207055303.bat

    • Size

      11KB

    • MD5

      dee9ee51c5aa6ac728708511e15a952a

    • SHA1

      a76fb2add4e53263cf174721644ac3aa3c2fe1ce

    • SHA256

      93be448106e9a6dbc3e951abbef8cb15324f00bd025add81413fb96e3e49417d

    • SHA512

      fbdc1625199d55b58ed1834f28221a53c04c0f03c00a1561bd4094952b1dda53220155866d055f5ca65eed3dc92862c3e45971c3ce1340a6d89411b2ca28b93c

    • SSDEEP

      192:JgXGXXdoHsEiZ+GJdvLKsYPe89Zu3bx1bx28atTAbYXfHdXc5syJhwt4:JgXAXdo85JFGFPe89ZUbx1bx28fbY/+J

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks