Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    100654964103132729.bat

  • Size

    16KB

  • Sample

    240720-15yjgazalk

  • MD5

    e77d175a19b553635a918185cd0acecd

  • SHA1

    cde82ac0b289f56da671a67a950feadbcc729656

  • SHA256

    20834d287a254ff9f87394a71b8205d0875b2f6cc33390c10f4ab723f4e86167

  • SHA512

    9d0710204b7e37d4e7607a9799a54e8e36c84a54e60cd5f3949f6c44f09c253d047621150f3cead18f40bb319681cc78c73abf8b9d878a848afe62fe7e438710

  • SSDEEP

    384:nlmy6Lm5fo+LkGEtLuuL7guvEUzJBVNl47HRAP7:noDL+f3LlEtbbvEU1BV747xo7

Score
8/10

Malware Config

Targets

    • Target

      100654964103132729.bat

    • Size

      16KB

    • MD5

      e77d175a19b553635a918185cd0acecd

    • SHA1

      cde82ac0b289f56da671a67a950feadbcc729656

    • SHA256

      20834d287a254ff9f87394a71b8205d0875b2f6cc33390c10f4ab723f4e86167

    • SHA512

      9d0710204b7e37d4e7607a9799a54e8e36c84a54e60cd5f3949f6c44f09c253d047621150f3cead18f40bb319681cc78c73abf8b9d878a848afe62fe7e438710

    • SSDEEP

      384:nlmy6Lm5fo+LkGEtLuuL7guvEUzJBVNl47HRAP7:noDL+f3LlEtbbvEU1BV747xo7

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks